CVE-2024-4568
CVSS 3.1 Score 2.9 of 10 (low)
Details
Published May 6, 2024
Updated: May 7, 2024
CWE ID 674
Summary
CVE-2024-4568 is a newly disclosed vulnerability affecting Xpdf 4.05 and earlier versions. The issue arises due to a PDF object loop in the PDF resources, which results in an infinite recursion and a subsequent stack overflow. Malicious actors could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. Users are strongly encouraged to update their Xpdf installations as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.