CVE-2024-20757: Bridge 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerability
Published Mar 18, 2024
·Updated
Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
4 affected components
All of the following
Any of the following
Adobe Bridge<13.0.6
Adobe Bridge>=14.0.0<14.0.2
Any of the following
macOS
Microsoft Windows
Event History
Mar 18, 2024
CVE Published
via MITRE·03:54 PM
Data Sourced
via MITRE·03:54 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-20757?
CVE-2024-20757 is a critical vulnerability that allows for out-of-bounds read which may disclose sensitive memory.
2
How do I fix CVE-2024-20757?
To mitigate CVE-2024-20757, upgrade Adobe Bridge to version 13.0.6 or 14.0.2 or later.
3
What versions are affected by CVE-2024-20757?
CVE-2024-20757 affects Adobe Bridge versions 13.0.5, 14.0.1 and earlier.
4
Can CVE-2024-20757 be exploited without user interaction?
Exploitation of CVE-2024-20757 requires user interaction.
5
What platforms are impacted by CVE-2024-20757?
CVE-2024-20757 specifically impacts Adobe Bridge on both Windows and macOS platforms.