Back to Database
Status published
Unknown
CVE-2024-56520
An issue was discovered in tc-lib-pdf-font before 2.6.4, as used...
Vulnerability Description
An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-56520
Credits & Attribution
No credits recorded in the NVD database.
References
- https://tcpdf.org
- https://github.com/tecnickcom/TCPDF/compare/6.7.8...6.8.0
- https://github.com/tecnickcom/TCPDF/commit/a0a02efe487cc39bd5223359e916dbeafb5cd6fe
- https://github.com/tecnickcom/tc-lib-pdf-font/commit/30012e333ae611c514ec2dc7cb370bbf4da4e677
- https://github.com/tecnickcom/tc-lib-pdf-font/compare/2.6.2...2.6.4
More from tecnick
View All →CVE-2024-56527
An issue was discovered in TCPDF before 6.8.0. The Error...
Unknown
0
CVE-2024-56522
An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses...
Unknown
0
CVE-2024-56521
An issue was discovered in TCPDF before 6.8.0. If libcurl...
Unknown
0
CVE-2024-56519
An issue was discovered in TCPDF before 6.8.0. setSVGStyles does...
Unknown
0
CVE-2018-17057
An issue was discovered in TCPDF before 6.2.22. Attackers can...
Critical
9.8
Affected Vendor
tecnick
View all reports →Affected Software
tcpdf
Vulnerable Versions:
0
Timeline
Official Publish:
December 27th, 2024
Last Modified:
November 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.