Netskope Threat Labs

FILE-PDF Adobe PDF out-of-bounds read attempt

IPS-SWG

5 SIDs: 160148, 160149, 160150, 160151, 160152

Detects PDFs exploiting CVE-2024-20735, CVE-2024-20736, CVE-2024-20747, CVE-2024-20748, and CVE-2024-20749, out-of-bounds read vulnerabilities in Adobe's PDF engine that can leak memory. The rule matches the crafted content streams and page operations that public exploits use to read beyond allocated buffers.