CVE-2024-8829

Summary

CVE-2024-8829 is an Information Disclosure vulnerability affecting PDF-XChange Editor. This issue arises due to insufficient validation of user-supplied data during EMF file parsing, resulting in an Out-of-Bounds Read. An attacker can exploit this vulnerability by compelling a user to visit a malicious webpage or open a malicious file. Although this vulnerability (ZDI-CAN-24314) does not directly allow code execution, it can be combined with other vulnerabilities to achieve that end. The sensitivity of the disclosed information will depend on the context of the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.