CVE-2024-8837

Summary

CVE-2024-8837 is a remote code execution vulnerability affecting PDF-XChange Editor, specifically in its XPS file parsing functionality. Malicious files or web pages can exploit this flaw, requiring user interaction. The root cause is insufficient validation of user-supplied data, leading to an out-of-bounds read, enabling attackers to execute arbitrary code within the affected system's context. This vulnerability, originally identified as ZDI-CAN-24408, poses a significant risk if left unaddressed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.