VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Dec 10, 2024· Updated Jun 17, 2026

CVE-2024-49531

CVE-2024-49531

Description

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

6
  • Adobe Inc./Acrobat5 versions
    cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*+ 4 more
    • cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*range: >=20.001.30002,<20.005.30748
    • cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*range: >=15.007.20033,<24.005.20320
    • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*range: >=20.001.30002,<20.005.30748
    • (no CPE)range: <=24.005.20307, <=24.001.30213, <=24.001.30193, <=20.005.30730, <=20.005.30710
    • (no CPE)range: 0
  • Adobe Inc./Acrobat Reader Dc
    cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*
    Range: >=15.007.20033,<24.005.20320

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.