CVE-2022-24960
Dashboard / Vulnerabilities / CVE-2022-24960
CVE-2022-24960
Published: 10 Mar 2022Last Modified: 15 Feb 2026
Summary:
Details: A use after free vulnerability was discovered in PDFTron SDK version 9.2.0. A crafted PDF can overwrite RIP with data previously allocated on the heap. This issue affects: PDFTron PDFTron SDK 9.2.0 on OSX; 9.2.0 on Linux; 9.2.0 on Windows.
References: https://github.com/suletm/security_research/blob/main/CVE/CVE-2022-24960.json, https://www.pdftron.com/nightly/#stable/2022-02-08/9.2/
Affected packages
Package
Name:
Purl:
Affected ranges
Type: GIT
Events:
Introduced- 0
Fixed -None
Affected versions
v7.0
v7.0.001
v7.0.002
v7.0.003
v7.0.004
v7.0.005
v7.0.006
v7.0.007
v7.0.008
v7.0.009
v7.0.010
v7.0.011
v7.0.012
v7.0.013
v7.0.014
v7.0.015
v7.0.016
v7.0.017
v7.0.018
v7.0.019
v7.0.020
v7.0.021
v7.0.022
v7.0.023
v7.0.024
v7.0.025
v7.0.026
v7.0.027
v7.0.028
v7.0.029
v7.0.030
v7.0.031
v7.0.032
v7.0.033
v7.0.034
v7.0.035
v7.0.036
v7.0.037
v7.0.038
v7.0.039
v7.0.040
v7.0.041
v7.0.042
v7.0.043
v7.0.044
v7.0.045
v7.0.046
v7.0.047
v7.0.048
v7.0.049
v7.0.050
v7.0.051
v7.0.052
v7.0.053
v7.0.054
v7.0.055
v7.0.056
v7.0.057
v7.0.058
v7.0.059
v7.0.060
v7.0.061
v7.0.062
v7.0.063
v7.0.064
v7.0.065
v7.0.066
v7.0.067
v7.0.068
v7.0.069
v7.0.070
v7.0.071
v7.0.072
v7.0.073
v7.0.074
v7.0.075
v7.0.076
v7.0.077
v7.0.078
v7.0.079
v7.0.080
v7.0.081
v7.0.082
v7.0.083
v7.0.084
v7.0.085
v7.0.086
v7.0.087
v7.0.088
v7.0.089
v7.0.090
v7.0.091
v7.0.092
v7.0.093
v7.0.094
v7.0.095
v7.0.096
v7.0.097
v7.0.098
v7.0.099
v7.0.100
v7.0.101
v7.0.102
v7.0.103
v7.0.104
v7.0.105
v7.0.106
v7.0.107
v7.0.108
v7.0.109
v7.0.110
v7.0.111
v7.0.112
v7.0.113
v7.0.114
v7.0.115
v7.0.116
v7.0.117
v7.0.118
v7.0.119
v7.0.120
v7.0.121
v7.0.122
v7.0.123
v7.0.124
v7.0.125
v7.0.126
v7.0.127
v7.0.128
v7.0.129
v7.0.130
v7.0.131
v7.0.132
v7.0.133
v7.0.134
v7.0.135
v7.0.136
v7.0.137
v7.0.138
v7.0.139
v7.0.140
v7.0.141
v7.0.142
v7.0.143
v7.0.144
v7.0.145
v7.0.146
v7.0.147
v7.0.148
v7.0.149
v7.0.150
v7.0.151
v7.0.152
v7.0.153
v7.0.154
v7.0.155
v7.0.156
v7.0.157
v7.0.158
v7.0.159
v7.0.160
v7.0.161
v7.0.162
v7.0.163
v7.0.164
v7.0.165
v7.0.166
v7.0.167
v7.0.168
v7.0.169
v7.0.170
v7.0.171
v7.0.172
v7.0.173
v7.0.174
v7.0.175
v7.0.176
v7.0.177
v7.0.178
v7.0.179
v7.0.180
v7.0.181
v7.0.182
v7.0.183
v7.0.184
v7.0.185
v7.0.186
v7.0.187
v7.0.188
v7.0.189
v7.0.190
v7.0.191
v7.0.192
v7.0.193
v7.0.194
v7.0.195
v7.0.196
v7.0.197
v7.0.198
v7.0.199
v7.0.200
v7.0.201
v7.0.202
v7.0.203
v7.0.204
v7.0.205
v7.0.206
v7.0.207
v7.0.208
v7.0.209
v7.0.210
v7.0.211
v7.0.212
v7.0.213
v7.0.214
v7.0.215
v7.0.216
v7.0.217
v7.0.218
v7.0.219
v7.0.220
v7.0.221
v7.0.222
v7.0.223
v7.0.224
v7.0.225
v7.0.226
v7.0.227
v7.0.228
v7.0.229
v7.0.230
v7.0.231
v7.0.232
v7.0.233
v7.0.234
v7.0.235
v7.0.236
v7.0.237
v7.0.238
v7.0.239
v7.0.240
v7.0.241
v7.0.242
v7.0.243
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
