CVE-2024-20727 [TianfuCup] out-of-bounds access vulnerability when parsing jpeg2000

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20747

CVE-2024-20747 affects Adobe Acrobat Reader/Reader DC: Font CharStrings INDEX out-of-bounds read vulnerability in affected versions (e.g., 20.005.30539, 23.008.20470 and earlier). Root cause is an out-of-bounds read in font parsing (CharStrings) that could disclose memory and bypass ASLR; exploit...

CVE-2024-20747 TALOS-2023-1908 - Adobe Acrobat Reader Font CharStrings INDEX out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20733 [ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause the application to crash, resulting in a denial of service...

CVE-2024-20733 [ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service. An attacker could leverage this vulnerability to cause the application to crash, resulting in a denial of service...

CVE-2024-20733

CVE-2024-20733 affects Adobe Acrobat Reader/DC (and related Continuous/Classic releases) with an Improvident input validation in font parsing (OTF) that can cause a denial-of-service. The issue is triggered when a user opens a specially crafted file, leading to an application crash. The vulnerabi...

CVE-2024-20748 TALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20748

Adobe Acrobat Reader (DC/Classic/Continuous) versions such as 20.005.30539 and 23.008.20470 and earlier are affected by CVE-2024-20748, an out-of-bounds read vulnerability in the font avar SegmentMaps that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction (vi...

CVE-2024-20734

CVE-2024-20734 affects Adobe Acrobat Reader DC/Continuous and related variants, with a Use-After-Free in AcroForm that can disclose memory content. Affected versions include 20.005.30539 and 23.008.20470 and earlier. Exploitation requires user interaction (opening a malicious file) and could bypa...

CVE-2024-20748 TALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20728 ZDI-CAN-22727: Adobe Acrobat Pro DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20728

Acrobat Reader 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The vulnerability is described in C...

CVE-2024-20736

Adobe Acrobat Reader DC/Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a local out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). CVSSv3.1 base score 5.5 (Medium); confidentia...

CVE-2024-20749 TALOS-2023-1910 - Adobe Acrobat Reader Font CharStrings CharStringsOffset out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20749 TALOS-2023-1910 - Adobe Acrobat Reader Font CharStrings CharStringsOffset out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20749

CVE-2024-20749 affects Adobe Acrobat Reader and related components. The advisory notes an out-of-bounds read vulnerability in Acrobat Reader versions such as 20.005.30539, 23.008.20470 and earlier, allowing disclosure of sensitive memory and potential bypass of mitigations like ASLR. Exploitation...

CVE-2024-20735 TALOS-2023-1905 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2024-20729 TALOS-2023-1890 - Adobe Acrobat Reader Annot3D object zoom event use-after-free vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20729 TALOS-2023-1890 - Adobe Acrobat Reader Annot3D object zoom event use-after-free vulnerability

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20729

CVE-2024-20729 affects Adobe Acrobat Reader (DC/Continuous) with Use-After-Free in the Annot3D object zoom handling, impacting v20.005.30539, v23.008.20470 and earlier. The issue can lead to arbitrary code execution in the context of the current user and requires the user to open a malicious file...