← Back

CVE-2024-30306

nvd nist
Published: May 2, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@adobe.com (Secondary)

Description

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (4)

4 products
Acrobat
Acrobat Dc
Acrobat Reader
Acrobat Reader Dc
Configuration A
4 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
From 20.001.30002 to 20.005.30574
From 15.007.20033 to 23.008.20533
From 20.001.30002 to 20.005.30574
From 15.007.20033 to 23.008.20533
Running on/withPlatform Versions
Apple
Macos
All versions
Microsoft
Windows
All versions

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.