CVE-2024-5512

Summary

CVE-2024-5512 is an Information Disclosure vulnerability affecting Kofax Power PDF. This issue arises due to insufficient validation of user-supplied data during JP2 file parsing, leading to an Out-of-Bounds Read. Attackers can exploit this flaw by persuading users to visit a malicious webpage or open a malicious file. While this vulnerability does not directly result in code execution, it can be combined with other exploits to achieve that outcome. Disclosed as ZDI-CAN-22021, this weakness poses a significant risk to installations of Kofax Power PDF.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.