CVE-2024-8833

Summary

CVE-2024-8833 is a remote code execution vulnerability affecting PDF-XChange Editor. This issue arises from an out-of-bounds read flaw in the software's XPS file parsing process. An attacker can exploit this vulnerability by crafting a malicious XPS file, which, when opened or accessed through a malicious webpage, can lead to arbitrary code execution on the affected system. The root cause of the issue is the lack of proper validation of user-supplied data during XPS file processing. ZDI-CAN-24318 disclosed this vulnerability before it was made public.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.