Out-Of-Bounds Read Vulnerability in PDF-XChange Editor

CVE-2024-8833

Summary

A vulnerability exists in the PDF-XChange Editor due to improper validation of user-supplied data during the parsing of XPS files. The flaw allows remote attackers to manipulate malicious files or navigate to harmful links, leading to an out-of-bounds read condition. An attacker can exploit this vulnerability to execute arbitrary code within the context of the currently running process on affected installations. This vulnerability requires the user to interact with the malicious content to initiate the attack, enhancing its potential impact in environments where users are likely to open unpredictable files.

References