NetSight
medium6.5

CVE-2022-24960

A use after free vulnerability was discovered in PDFTron SDK version 9.2.0.

Impact

A use after free vulnerability was discovered in PDFTron SDK version 9.2.0. A crafted PDF can overwrite RIP with data previously allocated on the heap. This issue affects: PDFTron PDFTron SDK 9.2.0 on OSX; 9.2.0 on Linux; 9.2.0 on Windows.

Affected products

VendorProductAffected versions
PdftronPdftron
Version 9.2.0

Weakness classification

References