Design/Logic Flaw

2024-02-1513:15:00

PRIOn knowledge base

www.prio-n.com

acrobat reader

out-of-bounds read

disclosure vulnerability

sensitive memory

aslr

exploitation

user interaction

malicious file

nvd

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.1%

JSON

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CPENameOperatorVersion
acrobatge20.001.30005
acrobatlt20.005.30574
acrobat_dcge15.008.20082
acrobat_dclt23.008.20533
acrobat_readerge20.001.30005
acrobat_readerlt20.005.30574
acrobat_reader_dcge15.008.20082
acrobat_reader_dclt23.008.20533

Name	Operator	Version
acrobat	ge	20.001.30005
acrobat	lt	20.005.30574
acrobat_dc	ge	15.008.20082
acrobat_dc	lt	23.008.20533
acrobat_reader	ge	20.001.30005
acrobat_reader	lt	20.005.30574
acrobat_reader_dc	ge	15.008.20082
acrobat_reader_dc	lt	23.008.20533