CVE-2024-25978

Summary

CVE-2024-25978 is a newly disclosed vulnerability that poses a denial of service risk. The issue lies in the unzip functionality of a file picker, which fails to adequately check the size of files being unzipped. This oversight can result in the system being overwhelmed by large files, leading to a denial of service condition. Attackers can exploit this vulnerability by crafting specially sized archive files to trigger the issue. Organizations are advised to install patches or updates as soon as they become available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.