Cisco Talos Blog: catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities

Jun 11, 2025

—

Source URL: https://blog.talosintelligence.com/catdoc-zero-day-nvidia-high-logic-fontcreator-and-parallel-vulnerabilities/
Source: Cisco Talos Blog
Title: catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities

Feedly Summary: Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three zero-day vulnerabilities in catdoc, as well as vulnerabilities in Parallel, NVIDIA and High-Logic FontCreator 15.

AI Summary and Description: Yes

Summary: The disclosed vulnerabilities highlight significant security risks across multiple software applications, including catdoc, Parallels, NVIDIA utilities, and High-Logic FontCreator. These vulnerabilities present opportunities for attackers to exploit memory corruption, privilege escalation, and sensitive information disclosure.

Detailed Description: The text discusses several critical zero-day vulnerabilities in various software tools, underscoring the need for ongoing vigilance and prompt patching of security flaws. Key points include:

– **Zero-Day Vulnerabilities**:
– Cisco Talos discovered three zero-day vulnerabilities in the catdoc utility, which translates documents from Microsoft Office formats to plain text.
– The catdoc vulnerabilities include:
– **Memory Corruption Vulnerability (CVE-2024-48877)**: Triggered by a specially crafted file that can lead to heap buffer overflow.
– **Integer Overflow Vulnerability (CVE-2024-52035)**: Associated with a flaw in how catdoc handles document file allocation.
– **Integer Underflow Vulnerability (CVE-2024-54028)**: Also causing heap-based memory corruption.

– **Other Vulnerabilities**:
– **Parallels Desktop**: Multiple privilege escalation vulnerabilities were discovered. They allow attackers to exploit a restoration or snapshot process in virtual machines:
– **Directory Traversal Vulnerability (CVE-2025-31359)**.
– **Privilege Escalation through Hard Links (CVE-2024-36486, CVE-2024-54189, CVE-2024-52561)**.

– **NVIDIA Vulnerability (CVE-2025-23247)**:
– An integer overflow identified in the NVIDIA cuobjdump utility that may allow for out-of-bounds write if a malicious CUDA file is provided.

– **High-Logic FontCreator Vulnerability (CVE-2025-20001)**:
– An out-of-bounds reading vulnerability could expose sensitive information if a user is tricked into opening a compromised font file.

These vulnerabilities reinforce the essential role of proactive security measures, including timely patch management and vulnerability discovery processes, especially for third-party applications. Security professionals must remain vigilant and leverage resources like Cisco Talos’ advisories and Snort rule sets to enhance detection and mitigation strategies.

01 1 2 2024 2025 24 3 4 5 7 a Act advisories AI and app Application applications Arch art as attack attackers AWS based Bi Bounds Write Buffer Overflow by C catdoc CI CIA Cisco Cisco Talos closed co compromised critical cross CVE D day day vulnerabilities de Desktop detection directory traversal disclosure document e exp exploit file flaws for g Gen Go H heap heap buffer overflow high Highlight HR http HTTPS in information information disclosure Integer Underflow Intel intelligence io ite J k Key l law led Li Link logic Logic FontCreator low M mac machine man management measures memory memory corruption Micro Microsoft Microsoft Office mitigation mitigation strategies multi N NGO no Nvidia o objdump of off on open ory oS OSINT other out over Parallel party Patch Patch Management patching point pre privilege escalation proactive proactive security proactive security measures process processes professionals prompt ps R rag rate RCE reading red research resource resources Risk risks Ro Role RSA s search sec security Security Flaw security flaws security measure security measures security professionals security risk security risks sensitive information sensitive information disclosure shot Sig Snap Snort Snort rule set Snort rule sets SoC software software applications software tools source SSE SSO strategies T Talos team ted text the third third-party third-party applications Time to tool tools Tor TP under up US use user V vigilance virtual virtual machine virtual machines vulnerabilities vulnerability vulnerability discovery Ware Well Wi x zero zero-day Zero-Day Vulnerabilities