CVE-2024-56520

Published: Dic 27, 2024 Last Modified: Nov 03, 2025 EU-VD ID: EUVD-2024-3587 Aliases: GHSA-grhh-r4jj-8jh7
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,3
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: low

Description

AI Translation Available

An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0017
Percentile
0,4th
Updated

EPSS Score Trend (Last 90 Days)

https://lists.debian.org/debian-lts-announce/2025/06/msg000…
https://lists.debian.org/debian-lts-announce/2025/06/msg00004.html
https://github.com/tecnickcom/tc-lib-pdf-font/commit/30012e…
https://github.com/tecnickcom/tc-lib-pdf-font/commit/30012e333ae611c514ec2dc7cb…
https://github.com/tecnickcom/tc-lib-pdf-font/compare/2.6.2…
https://github.com/tecnickcom/tc-lib-pdf-font/compare/2.6.2...2.6.4
https://github.com/tecnickcom/TCPDF/commit/a0a02efe487cc39b…
https://github.com/tecnickcom/TCPDF/commit/a0a02efe487cc39bd5223359e916dbeafb5c…
https://github.com/tecnickcom/TCPDF/compare/6.7.8...6.8.0
https://github.com/tecnickcom/TCPDF/compare/6.7.8...6.8.0
https://tcpdf.org
https://tcpdf.org