CVE-2024-9762

Summary

CVE-2024-9762 is an Out-of-Bounds Read Information Disclosure vulnerability affecting Tungsten Automation Power PDF. This issue allows remote attackers to disclose sensitive information by manipulating OXPS files. The flaw arises from insufficient validation of user-supplied data during file parsing, leading to reading data beyond the allocated object. While this vulnerability does not directly enable code execution, it could be exploited in combination with other weaknesses to achieve this goal. The ZDI-CAN-24478 discovery preceded this public disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.