CVE-2024-49576

Summary

CVE-2024-49576 is a use-after-free vulnerability discovered in Foxit Reader 2024.3.0.26795. This issue arises when the software fails to properly manage memory while processing a CBF_Widget object in a checkbox. Malicious JavaScript code embedded in a PDF document can exploit this vulnerability, leading to memory corruption and potentially enabling arbitrary code execution. To exploit this weakness, an attacker must coax the user into opening the compromised file. Additionally, if the user visits a maliciously crafted website with the browser plugin extension enabled, exploitation may also occur.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.