CVE-2024-12547

CVE-2024-12547 affects Tungsten Automation Power PDF, specifically the JPF file parsing component. The vulnerability arises from improper validation of user-supplied data, causing an out-of-bounds write past the end of an allocated object. An attacker can trigger remote code execution by convinci...