T5 Acrobat Vulnerability - Exploitable crash in DecodeTile

CVE-2024-34122

Summary

The vulnerability, present in Acrobat for Edge versions 126.0.2592.68 and earlier, allows for an out-of-bounds read condition during the parsing of crafted files. This weakness can potentially lead to a read operation beyond the limits of an allocated memory structure. An attacker may exploit this vulnerability to execute arbitrary code within the context of the user. Notably, successful exploitation requires user interaction, as it necessitates that the victim open a specially designed malicious file.

References