Stats
- First seen
- April 2023
- Last seen
- July 2026
Description
Detects documents exploiting out-of-bounds read vulnerabilities in Adobe Acrobat's enhanced metafile parsing, including CVE-2018-12843 through CVE-2018-12845, which can leak memory. The rule matches the crafted metafile records that public exploits use to read beyond allocated buffers.