CVE-2024-8836

Summary

CVE-2024-8836 is a newly disclosed vulnerability affecting PDF-XChange Editor. This issue is an Out-Of-Bounds Read Information Disclosure vulnerability in the TIF file parsing functionality. Remote attackers can exploit this flaw by crafting malicious pages or files to cause the software to read past the end of an allocated object, resulting in the disclosure of sensitive information. While this vulnerability does not directly allow code execution, it can be combined with other vulnerabilities to achieve this outcome. The flaw was reported as ZDI-CAN-24354.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.