CVE-2024-45872

Summary

CVE-2024-45872 is a newly discovered buffer overflow vulnerability affecting Bandisoft BandiView 7.05. This issue arises due to the software's inadequate validation of Portable Document Format (PSD) files. As a result, attackers can exploit this weakness by delivering specially crafted PSD files, leading to a buffer overflow condition in the sub_0x410d1d function. Successful exploitation could result in arbitrary code execution, potentially allowing attackers to gain unauthorized access, install malware, or cause other forms of damage. It is recommended that users update to the latest version of BandiView to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.