Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/acrobat/apsb24-92.html | Vendor Advisory |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2070 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
06 Feb 2025, 18:28
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Adobe acrobat Reader
Adobe acrobat Reader Dc Adobe acrobat Dc Adobe Adobe acrobat |
|
| References | () https://helpx.adobe.com/security/products/acrobat/apsb24-92.html - Vendor Advisory | |
| References | () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2070 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CPE | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* |
11 Dec 2024, 12:48
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CWE | ||
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
10 Dec 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-10 20:15
Updated : 2025-02-06 18:28
NVD link : CVE-2024-49533
Mitre link : CVE-2024-49533
JSON object : View
Products Affected
adobe
- acrobat_reader
- acrobat_dc
- acrobat
- acrobat_reader_dc
CWE
No CWE.