CVE-2024-9736

Summary

CVE-2024-9736 is a remote code execution vulnerability affecting Tungsten Automation Power PDF. The flaw is rooted in the improper validation of user-supplied data during PDF file parsing, which permits writing past the end of an allocated buffer. This issue allows attackers to execute arbitrary code on vulnerable installations. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious PDF file. The vulnerability, also known as ZDI-CAN-24452, can lead to significant security risks if left unpatched.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.