CVE-2024-39426

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Aug 14, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-394274.4In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SyCVE-2024-394284.4In trusty service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SyCVE-2024-394296.2In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with noCVE-2024-39434.3The WP To Do plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.0. This is due to miCVE-2024-394306.2In faceid servive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with noCVE-2024-394314.5In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with CVE-2024-394324.5In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with SCVE-2024-394334.4In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2024-394344.4In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with SystemCVE-2024-394357.8In Logmanager service, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no adCVE-2024-394366.7In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of pCVE-2024-394376.7In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of p
CVE-2024-39426: High severity, CVSS 7.8 | Vulnix