CVE-2024-8839

Summary

CVE-2024-8839 is a newly disclosed vulnerability in PDF-XChange Editor that enables information disclosure through an out-of-bounds read issue in JB2 file parsing. This vulnerability allows remote attackers to access sensitive information by manipulating malicious files or visiting malicious webpages. The flaw arises due to insufficient validation of user-supplied data, leading to a read past the end of an allocated object. While this vulnerability does not directly result in code execution, it can be combined with other weaknesses to achieve that objective. ZDI-CAN-24419 first reported this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.