CVE-2024-5512

Summary

CVE-2024-5512 is a new information disclosure vulnerability affecting Kofax Power PDF. This issue stems from inadequate validation of user-supplied data during JP2 file parsing, leading to an out-of-bounds read. Remote attackers can exploit this vulnerability by persuading users to visit a malicious webpage or open a malicious file, potentially disclosing sensitive information. While this vulnerability does not directly result in arbitrary code execution, it could be used in conjunction with other exploits to achieve that outcome. The ZDI (Zero Day Initiative) discovered and reported this vulnerability as ZDI-CAN-22021.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.