CVE-2024-5510

Summary

CVE-2024-5510 is a remote code execution vulnerability affecting Kofax Power PDF. This issue is caused by an out-of-bounds read flaw in the JP2 file parsing process. The vulnerability arises due to insufficient validation of user-supplied data, allowing attackers to read past the end of an allocated object. Exploitation requires user interaction, such as visiting a malicious website or opening a crafted file. Successful exploitation grants attackers the ability to execute arbitrary code in the context of the current process. This vulnerability, originally reported as ZDI-CAN-22019, poses a significant risk to installations of Kofax Power PDF.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.