CVE-2024-8049

Medium

Description

In Progress Telerik Document Processing Libraries, versions prior to 2024 Q4 (2024.4.1106), importing a document with unsupported features can lead to excessive processing, leading to excessive use of computing resources leaving the application process unavailable.

SeverityMedium

CVSS6.5

Exploit probability—

Product

Progress Telerik Document Processing Libraries

PublishedNov 13, 2024

First seenNov 13, 2024

Weakness typeCWE-834CWE-834

How to fix

Update

progress telerik_document_processing_libraries2024.4.1106 or later

Vendor advisories

docs.telerik.com/devtools/document-processing/knowledge-base/excessive-allocation-cve-2024-8049

Affected products

Product	Affected versions	Fixed in
progress telerik_document_processing_libraries	v < 2024.4.1106	2024.4.1106

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.