CVE-2024-8825

Summary

CVE-2024-8825 is a remote code execution vulnerability affecting PDF-XChange Editor. The flaw, identified as ZDI-CAN-24263, is found in the PDF file parsing function where user-supplied data is not properly validated, leading to an out-of-bounds read. This issue allows attackers to execute arbitrary code on affected installations, requiring user interaction through visiting a malicious webpage or opening a specially crafted PDF file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.