Stats
- First seen
- January 2022
- Last seen
- October 2026
Description
Detects a PDF exploiting CVE-2018-4985, an out-of-bounds read in Adobe Reader's JPEG2000 decoding that can leak memory. The rule matches the crafted color channel boxes that public exploits use to read beyond allocated buffers.