CVE-2024-8820

Summary

CVE-2024-8820 is a newly disclosed vulnerability affecting PDF-XChange Editor. This issue permits information disclosure through an out-of-bounds read vulnerability during U3D file parsing. Attackers can exploit this remotely by persuading users to visit a malicious webpage or open a malicious file. The root cause of the vulnerability lies in insufficient data validation, allowing the reading of data beyond the allocated buffer. Although this vulnerability does not directly lead to code execution, it can be combined with other weaknesses to achieve that goal. ZDI-CAN-24215 first reported this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.