Use-After-Free Vulnerability in Foxit PDF Reader's AcroForm

CVE-2024-30339

What is CVE-2024-30339?

A vulnerability exists in Foxit PDF Reader's handling of AcroForms that allows attackers to execute arbitrary code through a use-after-free condition. This issue arises when the software fails to validate the existence of an object prior to executing operations on it. An attacker can exploit this flaw by enticing a user to visit a malicious page or open a crafted file, enabling them to execute unauthorized commands in the context of the running application. Ensuring users have the latest updates can help mitigate this issue.

References