CVE-2024-30312: TALOS-2024-1952 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30312?
CVE-2024-30312 is classified as a medium severity vulnerability that allows for out-of-bounds memory read, potentially leading to sensitive data disclosure.
Who is affected by CVE-2024-30312?
CVE-2024-30312 affects Adobe Acrobat DC and Adobe Acrobat Reader versions 20.005.30574, 24.002.20736, and earlier.
How do I fix CVE-2024-30312?
To fix CVE-2024-30312, update Adobe Acrobat DC or Adobe Acrobat Reader to the latest version available from Adobe.
What types of vulnerabilities can CVE-2024-30312 exploit?
CVE-2024-30312 can be exploited to bypass security mitigations such as Address Space Layout Randomization (ASLR).
Can CVE-2024-30312 be exploited on macOS?
CVE-2024-30312 specifically impacts Adobe Acrobat software and is not tied to vulnerabilities in the macOS operating system.