CVE-2024-8812

Summary

CVE-2024-8812 is a remote code execution vulnerability affecting PDF-XChange Editor. Malicious U3D files can cause an out-of-bounds read, allowing attackers to execute arbitrary code on affected systems. This vulnerability (Was ZDI-CAN-24207) arises due to insufficient validation of user-supplied data during U3D file parsing. User interaction, such as visiting a malicious webpage or opening a malicious file, is necessary for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.