CVE-2024-30286: Adobe FrameMaker DOC File Parsing Memory Corruption
Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30286?
CVE-2024-30286 is classified as a medium severity vulnerability due to its potential to disclose sensitive information.
How do I fix CVE-2024-30286?
To mitigate CVE-2024-30286, update Adobe Framemaker to version 2020.6 or later or to version 2022.4 or later.
What versions of Adobe Framemaker are affected by CVE-2024-30286?
CVE-2024-30286 affects Adobe Framemaker versions 2020.5, 2022.3, and earlier.
Can CVE-2024-30286 be exploited remotely?
While CVE-2024-30286 requires local access for exploitation, it poses a risk of sensitive memory disclosure.
What mitigations are bypassed by CVE-2024-30286?
CVE-2024-30286 can bypass memory safety mitigations such as Address Space Layout Randomization (ASLR).