CVE-2024-8844

Summary

CVE-2024-8844 is an Information Disclosure vulnerability affecting PDF-XChange Editor. This issue stems from an Out-Of-Bounds Read flaw in the PDF file parsing process. The vulnerability allows remote attackers to disclose sensitive information on affected systems, necessitating user interaction, such as visiting a malicious webpage or opening a malicious file. While the flaw itself does not enable arbitrary code execution directly, it may be combined with other vulnerabilities for that purpose. This vulnerability, originally reported as ZDI-CAN-24550, can result in significant security risks if not addressed promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.