CVE-2024-30311: TALOS-2024-1946 - Adobe Acrobat Reader Font gvar GlyphVariationData out-of-bounds read vulnerability
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30311?
CVE-2024-30311 is classified as a high severity vulnerability due to its potential to disclose sensitive memory.
How do I fix CVE-2024-30311?
To mitigate CVE-2024-30311, update Adobe Acrobat and Adobe Acrobat Reader to the latest versions that address this vulnerability.
Which versions of Adobe Acrobat are affected by CVE-2024-30311?
CVE-2024-30311 affects Adobe Acrobat versions 20.005.30574, 24.002.20736 and earlier.
Can CVE-2024-30311 be exploited remotely?
Yes, CVE-2024-30311 can potentially be exploited remotely by an attacker to bypass memory mitigations.
Does CVE-2024-30311 affect both Windows and macOS users?
CVE-2024-30311 specifically affects Adobe Acrobat products, but the vulnerability does not apply to macOS or Windows operating systems directly.