NetSight
medium5.5

CVE-2024-20736

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m…

Impact

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

VendorProductAffected versions
AdobeAcrobat Dc
from 15.008.20082 before 23.008.20533
AdobeAcrobat Reader Dc
from 15.008.20082 before 23.008.20533
AdobeAcrobat
from 20.001.30005 before 20.005.30574
AdobeAcrobat Reader
from 20.001.30005 before 20.005.30574

Weakness classification

References