Lucene search

K
redhatcveRedhat.comRH:CVE-2024-4367
HistoryMay 14, 2024 - 6:54 p.m.

CVE-2024-4367

2024-05-1418:54:47
redhat.com
access.redhat.com
24
pdf.js
font handling
vulnerability
firefox
thunderbird

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context.

Mitigation

null