A type check was missing when... CVE-2024-4367

- AV AC AU C I A
发布： 2024-05-14
修订： 2025-01-22

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有48条受影响产品信息