← Back

CVE-2024-39426

nvd nist
Published: Aug 14, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@adobe.com (Secondary)

Description

Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (5)

4 products
Acrobat
Acrobat Dc
Acrobat Reader
Acrobat Reader Dc
Configuration A
5 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
From 20.001.30005 to 20.005.30655
From 24.001.20604 to 24.001.30159
From 15.008.20082 to 24.002.21005
From 20.001.3005 to 20.005.30655
From 15.008.20082 to 24.002.21005
Running on/withPlatform Versions
Apple
Macos
All versions
Microsoft
Windows
All versions

References (1)

Timeline

No history available yet.