CVE-2024-8828

Summary

CVE-2024-8828 is a newly disclosed vulnerability in PDF-XChange Editor that permits information disclosure through an out-of-bounds read in its EMF file parsing process. This issue arises due to insufficient validation of user-supplied data, enabling remote attackers to access sensitive information on affected systems. Exploitation requires user interaction, either through visiting a malicious webpage or opening a specifically crafted file. The EMF file parsing flaw, identified as ZDI-CAN-24313, may also potentially be combined with other vulnerabilities to execute arbitrary code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.