CVE-2024-41832: TALOS-2024-2002 | Adobe Acrobat Reader Font gvar TupleVariation Data Out-Of-Bounds Read Vulnerability
Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41832?
CVE-2024-41832 is classified as a high-severity vulnerability due to the potential disclosure of sensitive memory.
How do I fix CVE-2024-41832?
To fix CVE-2024-41832, update to the latest versions of Adobe Acrobat Reader and Acrobat DC.
What versions are affected by CVE-2024-41832?
CVE-2024-41832 affects Adobe Acrobat Reader versions 20.005.30636 and earlier as well as Acrobat DC versions 15.008.20082 through 24.002.21005.
What type of vulnerability is CVE-2024-41832?
CVE-2024-41832 is an out-of-bounds read vulnerability that can lead to memory disclosure.
Can CVE-2024-41832 be exploited to bypass security measures?
Yes, CVE-2024-41832 can be exploited to bypass mitigations such as Address Space Layout Randomization (ASLR).