Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/acrobat/apsb24-92.html | Vendor Advisory |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2064 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
06 Feb 2025, 18:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2064 - Third Party Advisory | |
| References | () https://helpx.adobe.com/security/products/acrobat/apsb24-92.html - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Adobe acrobat Reader
Adobe acrobat Reader Dc Adobe acrobat Dc Adobe Adobe acrobat |
|
| CPE | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* |
11 Dec 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| References |
|
10 Dec 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-10 20:15
Updated : 2025-02-06 18:28
NVD link : CVE-2024-49532
Mitre link : CVE-2024-49532
JSON object : View
Products Affected
adobe
- acrobat_reader
- acrobat_dc
- acrobat
- acrobat_reader_dc
CWE
No CWE.