CVE-2024-8823

Summary

CVE-2024-8823 is an Information Disclosure vulnerability affecting PDF-XChange Editor. This issue arises from insufficient validation of user-supplied data during the parsing of JB2 files, leading to an Out-of-Bounds Read. Attackers can exploit this vulnerability by crafting malicious files or luring users to infected webpages. The flaw does not allow for direct code execution but can be combined with other vulnerabilities for more serious attacks. ZDI-CAN-24261 first disclosed this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.