CVE-2024-9759

Summary

CVE-2024-9759 is a newly disclosed vulnerability affecting Tungsten Automation Power PDF. This out-of-bounds read information disclosure issue permits remote attackers to access sensitive data on affected systems. The vulnerability is linked to the improper validation of user-supplied data during the parsing of GIF files. The attacker can exploit this flaw by making the target visit a malicious webpage or open a maliciously crafted file. While this vulnerability does not directly lead to code execution, it can be combined with other exploits to achieve that goal. ZDI-CAN-24475 reported this issue prior to its public disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.