CVE-2024-9751

Summary

CVE-2024-9751 is a remote code execution vulnerability affecting Tungsten Automation Power PDF. The issue lies in the JP2 file parsing process, where insufficient validation of user-supplied data leads to an out-of-bounds read. This allows attackers to execute arbitrary code on vulnerable installations. Exploitation requires users to visit a malicious page or open a specially crafted file. The flaw, originally identified as ZDI-CAN-24468, underscores the importance of proper validation and security measures in handling user data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.