Information Disclosure Vulnerability in PDF-XChange Editor

CVE-2024-8845

Summary

The vulnerability in PDF-XChange Editor arises from improper validation during the parsing of PDF files, allowing remote attackers to exploit this flaw. The issue enables attackers to disclose sensitive information through an out-of-bounds read condition triggered by user interaction, such as visiting a malicious website or opening a compromised PDF document. Due to insufficient validation of user-supplied data, this flaw may result in reading data beyond the intended buffer limits, potentially leading to further exploitation opportunities alongside other vulnerabilities.

References