CVE-2024-20726: [TianfuCup] JP2K Image Parsing Out-Of-Bounds Write
Published Feb 15, 2024
·Updated
Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
8 affected components
All of the following
Any of the following
Adobe Acrobat DC>=15.008.20082<23.008.20533
Adobe Acrobat Reader DC>=15.008.20082<23.008.20533
Any of the following
Apple macOS
Microsoft Windows
All of the following
Any of the following
Adobe Acrobat>=20.001.30005<20.005.30574
Adobe Acrobat Reader>=20.001.30005<20.005.30574
Any of the following
Apple macOS
Microsoft Windows
Event History
Feb 15, 2024
CVE Published
via MITRE·12:18 PM
Data Sourced
via MITRE·12:18 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-20726?
The severity of CVE-2024-20726 is high due to its potential for arbitrary code execution.
2
How do I fix CVE-2024-20726?
To fix CVE-2024-20726, update Adobe Acrobat or Adobe Acrobat Reader to the latest version available.
3
Which versions of Acrobat Reader are affected by CVE-2024-20726?
Affected versions of Acrobat Reader include 20.005.30539, 23.008.20470 and earlier.
4
What type of vulnerability is CVE-2024-20726?
CVE-2024-20726 is an out-of-bounds write vulnerability.
5
Is user interaction required to exploit CVE-2024-20726?
Yes, exploitation of CVE-2024-20726 requires user interaction, such as opening a malicious document.