CVE-2024-9248

Summary

CVE-2024-9248 is a remote code execution vulnerability affecting Foxit PDF Reader. This issue arises due to insufficient validation of user-supplied PDF data during file parsing, leading to an out-of-bounds write condition. Malicious PDF files or web pages can exploit this vulnerability, requiring user interaction. An attacker can successfully execute arbitrary code in the context of the current process. This vulnerability, identified as ZDI-CAN-24300 before its public disclosure, poses a significant threat to affected Foxit PDF Reader installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.