Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/acrobat/apsb24-92.html | Vendor Advisory |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2076 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
06 Feb 2025, 18:27
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Adobe acrobat Reader
Adobe acrobat Reader Dc Adobe acrobat Dc Adobe Adobe acrobat |
|
| CPE | cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* |
|
| References | () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2076 - Vendor Advisory | |
| References | () https://helpx.adobe.com/security/products/acrobat/apsb24-92.html - Vendor Advisory |
11 Dec 2024, 12:48
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| References |
|
|
| CWE |
10 Dec 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-10 20:15
Updated : 2025-02-06 18:27
NVD link : CVE-2024-49534
Mitre link : CVE-2024-49534
JSON object : View
Products Affected
adobe
- acrobat_reader
- acrobat_dc
- acrobat
- acrobat_reader_dc
CWE
No CWE.