CVE-2022-24960: Pdftron

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A use after free vulnerability was discovered in PDFTron SDK version 9.2.0. A crafted PDF can overwrite RIP with data previously allocated on the heap. This issue affects: PDFTron PDFTron SDK 9.2.0 on OSX; 9.2.0 on Linux; 9.2.0 on Windows.

Affected products

• Pdftron Pdftron: version 9.2.0 only

Published 2022-03-10. Last modified 2026-06-17.