CVE-2024-4367 is a critical vulnerability (CVSS 9.8) in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the FontMatrix object within PDF files.
-
Updated
Jan 5, 2025 - Python
CVE-2024-4367 is a critical vulnerability (CVSS 9.8) in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the FontMatrix object within PDF files.
Add a description, image, and links to the cve-2024-4367 topic page so that developers can more easily learn about it.
To associate your repository with the cve-2024-4367 topic, visit your repo's landing page and select "manage topics."