CVE-2024-8822

Summary

CVE-2024-8822 is an Information Disclosure vulnerability affecting PDF-XChange Editor. Malicious U3D files can cause the software to read past the end of an allocated buffer during the parsing process, revealing sensitive information. This issue can be exploited when a user visits a malicious page or opens a malicious file. While this vulnerability does not directly allow code execution, it can be used in conjunction with other vulnerabilities to achieve that goal. The root cause is the lack of proper validation of user-supplied data. This vulnerability, identified as ZDI-CAN-24217, was reported to the Zero Day Initiative.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.