CVE-2024-20765

Summary

CVE-2024-20765 is a Use After Free vulnerability affecting Adobe Acrobat Reader versions 20.005.30539 and 23.008.20470, and possibly older releases. This issue could allow an attacker to execute arbitrary code if a victim opens a maliciously crafted PDF file. The vulnerability stems from a memory management error in Acrobat Reader, resulting in a memory location being freed prematurely but still being used, thereby creating an opportunity for code injection. This security weakness necessitates user interaction for an attack to be successful.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.