CVE-2024-8838

Summary

CVE-2024-8838 is a remote code execution vulnerability affecting PDF-XChange Editor. Malicious XPS files can trigger an out-of-bounds read issue during parsing, allowing attackers to execute arbitrary code on affected systems. This requires user interaction, such as visiting a malicious website or opening a maliciously crafted file. The vulnerability arises from insufficient data validation, resulting in a read past the end of an allocated buffer. ZDI-CAN-24409 disclosed this issue prior to its public release.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.