CVE-2024-9735

Summary

CVE-2024-9735 is a remote code execution vulnerability affecting Tungsten Automation Power PDF. Malicious JPF files can exploit this issue by causing an out-of-bounds write during the parsing process. The lack of adequate data validation is the root cause, allowing attackers to inject and execute arbitrary code. User interaction, such as visiting a malicious webpage or opening a malicious file, is required to trigger the exploit. This vulnerability, identified as ZDI-CAN-24451, can lead to significant security risks if left unaddressed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.