CVE-2022-34248: 
Adobe InDesign vulnerability analysis and mitigation

Adobe InDesign versions 17.3.1 and earlier, along with 16.4.1 and earlier, were identified to contain an out-of-bounds read vulnerability when parsing crafted files. This vulnerability was disclosed on July 13, 2022, and was assigned the identifier CVE-2022-34248 (NVD, Adobe Bulletin).

The vulnerability has been assessed with a CVSS 3.0 score of 7.7, indicating a high severity level. The scoring parameters include Impact:High, Attack Vector:Local, Attack Complexity:Low, Scope:Unchanged, Privileges Required:None, User Interaction:Required, and Confidentiality:High (ManageEngine).

The out-of-bounds read vulnerability could potentially lead to information disclosure and system compromise when processing specially crafted files in Adobe InDesign (NVD).

As of the vulnerability disclosure, no known exploits were available in the wild. The vulnerability requires local access and user interaction to be exploited (ManageEngine).

Adobe addressed this vulnerability by releasing version 16.4.2 of InDesign as part of a security update. Users are advised to update to the latest version to mitigate the risk (Adobe Bulletin).