CVE-2024-8835

Summary

CVE-2024-8835 is an Information Disclosure vulnerability affecting PDF-XChange Editor. This issue arises from an Out-of-Bounds Read flaw in the software's JB2 file parsing process. The vulnerability enables remote attackers to disclose sensitive information on affected installations, requiring user interaction, such as visiting a malicious webpage or opening a malicious file. The root cause lies in insufficient data validation during JB2 file processing, potentially leading to reading past the end of an allocated object. An attacker could combine this vulnerability with others to execute arbitrary code in the context of the current process. (ZDI-CAN-24320)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.