CVE-2024-8845

🗓️ 22 Nov 2024 21:05:33Reported by zdiType

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.	4 Oct 202400:00	–	bdu_fstec
CNNVD	PDF-XChange Editor 缓冲区错误漏洞	22 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-8845 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	22 Nov 202421:05	–	cvelist
EUVD	EUVD-2024-49573	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8845	22 Nov 202421:15	–	nvd
OSV	CVE-2024-8845	22 Nov 202421:15	–	osv
Tenable Nessus	PDF-XChange Editor < 10.4.0.388 Multiple Vulnerabilities	20 Sep 202400:00	–	nessus
Positive Technologies	PT-2024-6610 · Pdf Xchange · Pdf-Xchange Editor	26 Jun 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-8845 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	22 Nov 202421:05	–	vulnrichment
Zero Day Initiative	PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability	17 Sep 202400:00	–	zdi

NVD

Vulners

Node

pdf-xchange pdf-toolsRange10.3.0.386–10.4.0.388

pdf-xchange pdf-xchange_editorRange10.3.0.386–10.4.0.388

[
  {
    "vendor": "PDF-XChange",
    "product": "PDF-XChange Editor",
    "versions": [
      {
        "version": "10.3.0.386",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-1268/

17 Jun 2026 08:23Current

3.4Low risk

Vulners AI Score3.4

CVSS 3.15.5

CVSS 33.3

EPSS0.00371

SSVC

CWE-125