CVE-2024-34101

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier

Description The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Recommendations For Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier, consider disabling the ability to open PDF files from untrusted sources until a patch is available. Restrict access to sensitive information and avoid using the affected software to open potentially malicious files. As a temporary workaround, consider implementing additional security measures to prevent the exploitation of this vulnerability, such as restricting user privileges and monitoring system activity for signs of malicious behavior. At the moment, there is no information about a newer version that contains a fix for this vulnerability.