CVE-2024-8848

Summary

CVE-2024-8848 is an information disclosure vulnerability affecting PDF-XChange Editor's handling of AcroForms. This issue arises from insufficient validation of user-supplied data, enabling remote attackers to read beyond the bounds of allocated objects. The exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. While this vulnerability, identified as ZDI-CAN-25268, does not directly result in code execution, it can be combined with other vulnerabilities to achieve that goal.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.