← CVE Intelligence

CVE-2020-24427

Acrobat Reader DC Codec Input Validation Vulnerability Could Lead to Information Disclosure PUBLISHED

Description (CNA)

Acrobat Reader versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by an input validation vulnerability when decoding a crafted codec that could result in the disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (CNA)

Vendor / productVersions
Adobe / Acrobat Readeraffected unspecified through 2017.011.30175; affected unspecified through 2020.012.20048; affected unspecified through 2020.001.30005; affected unspecified through None

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.