Use-After-Free Vulnerability in Tungsten Automation Power PDF for JP2 File Parsing

CVE-2024-12548

What is CVE-2024-12548?

A significant vulnerability has been identified in the parsing of JP2 files within Tungsten Automation Power PDF, exposing installations to potential information disclosure. The flaw arises due to the failure to validate object existence prior to operations, allowing a remote attacker to exploit this oversight. Successful exploitation requires user interaction, such as opening a malicious file or visiting a compromised webpage. The vulnerability can be leveraged with other flaws to execute arbitrary code within the context of the current process, potentially leading to severe data breaches and loss of information security.

References