CVE-2024-9744

CVE-2024-9744 is an out-of-bounds write vulnerability affecting Tungsten Automation Power PDF when parsing JP2 files. This flaw, stemming from insufficient data validation, allows remote attackers to achieve arbitrary code execution in the context of the current process. It carries a CVSS score of 7.8 (High) due to its potential for high impact on confidentiality, integrity, and availability, though it requires user interaction (e.g., opening a malicious file). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.