Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2024-5511

Summary

The vulnerability in Kofax Power PDF arises from improper validation during the parsing of JP2 files, resulting in out-of-bounds read capabilities. This flaw permits remote attackers to execute arbitrary code on affected systems after enticing a user to open a malicious JP2 file or visit a compromised webpage. The exploitation occurs when user-supplied data leads to read operations that exceed allocated memory boundaries, allowing attackers to execute code with the permissions of the user's process.

References