Vulnerabilitycritical
Multiple vulnerabilities in Adobe Acrobat Reader could lead to remote code execution
- CVEs
- CVE-2024-20735CVE-2024-20747CVE-2024-20749CVE-2024-20748CVE-2024-20731CVE-2024-20729CVE-2024-20730CVE-2024-23305CVE-2024-21812CVE-2024-23313CVE-2024-23606CVE-2024-21795CVE-2024-23310CVE-2024-22097CVE-2024-23809CVE-2024-24793CVE-2024-24794CVE-2023-45318CVE-2023-39540CVE-2023-39541CVE-2023-38562CVE-2024-21825CVE-2024-23496CVE-2024-21802CVE-2024-21836CVE-2024-23605
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-38562+2 related CVEs | A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01 | 9.1 group max | 1% | PoC | |
| CVE-2023-45318 | A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004 | 9.8 | 2% | PoC | |
| CVE-2024-20730 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary… | 7.8 group max | 4% | ||
| CVE-2024-23313 | An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111) | 9.8 | 2% | PoC | |
CVE-2024-21802+4 related CVEs | A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17 | 9.8 | 1% | PoC ×2 | |
CVE-2024-24793+1 related CVE | A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5 | 9.8 | 1% | PoC |
From the original article
4 min read at blog.talosintelligence.com
Cisco Talos has disclosed more than 30 vulnerabilities in February, including seven in Adobe Acrobat Reader, one of the most popular PDF editing and reading software currently available. Adversaries could exploit these vulnerabilities to trigger the reuse of a previously freed object, thus causing memory corruption and potentially arbitrary code execution on the targeted machine.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.