CVE-2024-8846

Summary

CVE-2024-8846 is a new Information Disclosure vulnerability affecting PDF-XChange Editor. This issue arises during the parsing of TIF files, where insufficient validation of user-supplied data results in an Out-of-Bounds Read. Attackers can exploit this vulnerability by crafting a malicious TIF file, which, when opened, allows them to disclose sensitive information from the affected system. While this vulnerability does not directly enable arbitrary code execution, it can be combined with other vulnerabilities to achieve that goal. This finding was originally reported as ZDI-CAN-24835.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.