Netskope Threat Labs

FILE-PDF Adobe Acrobat Reader Out-of-bound read attempt detected

IPS-CFWIPS-SWG

4 SIDs: 160172, 160173, 160174, 160184

Detects PDFs exploiting CVE-2024-49532, CVE-2024-49533, CVE-2024-49534, and CVE-2025-27161, out-of-bounds read vulnerabilities in Adobe Acrobat Reader that can leak memory. The rule matches the crafted content structures that public exploits use to read beyond allocated buffers.