Lucene search

K
osvGoogleOSV:CVE-2024-4976
HistoryMay 15, 2024 - 9:15 p.m.

CVE-2024-4976

2024-05-1521:15:00
Google
osv.dev
xpdf
array write
out-of-bounds
acroform
security vulnerability

CVSS4

2.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:L

AI Score

6.8

Confidence

High

Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference.

CVSS4

2.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:L

AI Score

6.8

Confidence

High