CVE-2024-39387

Summary

CVE-2024-39387 is a newly disclosed vulnerability affecting Bridge software versions 13.0.8 and 14.1.1 and older. This issue involves an out-of-bounds read vulnerability, which allows an attacker to read beyond the intended memory boundary. By doing so, sensitive data could be disclosed, potentially bypassing mitigations like Address Space Layout Randomization (ASLR). Notably, exploitation occurs upon opening a malicious file, requiring user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.