Stats
- First seen
- January 2022
- Last seen
- October 2026
Description
Detects a PDF exploiting CVE-2018-4901, memory corruption in Adobe Acrobat Reader's trailer parsing that can allow code execution. The rule matches the malformed document trailer that public exploits use to corrupt parser memory.