---
title: "Tungsten Automation Power PDF vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/tungsten-automation/power-pdf
type: product
description: "Tungsten Automation Power PDF has 137 published CVEs, 0 in CISA KEV and 0 with public exploits."
updated: 2025-02-11
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Tungsten Automation Power PDF vulnerabilities

Vendor: [Tungsten Automation](https://radicalnotion.ai/vendor/tungsten-automation)

- **Published CVEs:** 137
- **In CISA KEV:** 0
- **With a public exploit:** 0
- **With a patch:** 137
- **Average CVSS:** 6.8
- **First CVE:** 2024-04-01
- **Latest CVE:** 2025-02-11

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 0 |
| High | 94 |
| Medium | 28 |
| Low | 15 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 50 |
| [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 38 |
| [CWE-122](https://radicalnotion.ai/cwe/cwe-122) | Heap-based Buffer Overflow | 14 |
| [CWE-416](https://radicalnotion.ai/cwe/cwe-416) | Use After Free | 13 |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 11 |
| [CWE-121](https://radicalnotion.ai/cwe/cwe-121) | Stack-based Buffer Overflow | 8 |
| [CWE-457](https://radicalnotion.ai/cwe/cwe-457) | Use of Uninitialized Variable | 1 |
| [CWE-749](https://radicalnotion.ai/cwe/cwe-749) | Exposed Dangerous Method or Function | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2024 | 132 |
| 2025 | 5 |

## Affected versions (top 24 of 30)

| Version | Kind | CVEs |
| --- | --- | --- |
| \>= 5.0.0.10.0.23307 | range | 32 |
| \< 5.0.0.10 | range | 27 |
| \< 5.1 | range | 26 |
| \< 5.0.0.11 | range | 21 |
| \< 5.0.0.17 | range | 17 |
| 5.0.0.10.0.23307 \<= v \< 5.1 | range | 17 |
| \< 5.0.0.21 | range | 9 |
| \< 5.0.0.16 | range | 7 |
| \< 5.1.0.1 | range | 6 |
| 5.0.0.10.0.23307 \<= v \< 5.1.0.1 | range | 6 |
| \< 5.0.0.12 | range | 5 |
| \< 5.0.0.15 | range | 5 |
| 5.0.0.10 | patched | 27 |
| 5.1 | patched | 26 |
| 5.0.0.11 | patched | 21 |
| 5.0.0.17 | patched | 17 |
| 5.0.0.21 | patched | 9 |
| 5.0.0.16 | patched | 7 |
| 5.1.0.1 | patched | 6 |
| 5.0.0.12 | patched | 5 |
| 5.0.0.15 | patched | 5 |
| 5.0.0.18 | patched | 5 |
| 5.1.1.2 | patched | 5 |
| 5.0.0.19 | patched | 3 |

## CVEs (first 30 of 137, most severe first)

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2024-12547 | Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | high | 8.8 | No | No | Yes |
| CVE-2024-12548 | Tungsten Automation Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-12549 | Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-12550 | Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-12551 | Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9755 | Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9757 | Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-9761 | Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-9735 | Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9744 | Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9751 | Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9764 | Tungsten Automation Power PDF PDF File Parsing Use-After-Free Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9758 | Tungsten Automation Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability | medium | 4.3 | No | No | Yes |
| CVE-2024-9753 | Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-9763 | Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-9762 | Tungsten Automation Power PDF OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-9760 | Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-9759 | Tungsten Automation Power PDF GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-9754 | Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-9752 | Tungsten Automation Power PDF JPG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | low | 3.3 | No | No | Yes |
| CVE-2024-9734 | Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9733 | Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9736 | Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9737 | Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9739 | Tungsten Automation Power PDF PDF File Parsing Memory Corruption Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9750 | Tungsten Automation Power PDF PNG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9745 | Tungsten Automation Power PDF TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9741 | Tungsten Automation Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9746 | Tungsten Automation Power PDF TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |
| CVE-2024-9747 | Tungsten Automation Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | high | 7.8 | No | No | Yes |

## Frequently asked questions

### How many CVEs does Tungsten Automation Power PDF have?

Tungsten Automation Power PDF has 137 published CVE records since 2024.

### How many Tungsten Automation Power PDF CVEs are in CISA KEV?

None of Tungsten Automation Power PDF's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for Tungsten Automation Power PDF vulnerabilities?

No Tungsten Automation Power PDF CVEs currently have a tracked public exploit in this dataset.

### Which versions of Tungsten Automation Power PDF are affected?

30 distinct Tungsten Automation Power PDF versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in Tungsten Automation Power PDF CVEs?

Tungsten Automation Power PDF's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-122 (Heap-based Buffer Overflow), CWE-416 (Use After Free).

### What is the average severity of Tungsten Automation Power PDF CVEs?

The average CVSS base score across Tungsten Automation Power PDF's scored CVEs is 6.8.

## Other products from this vendor

- [TotalAgility](https://radicalnotion.ai/vendor/tungsten-automation/totalagility) (2 CVEs)
- [kofax capture](https://radicalnotion.ai/vendor/tungsten-automation/kofax-capture) (1 CVEs)
- [Tungsten Capture (formerly Kofax Capture)](https://radicalnotion.ai/vendor/tungsten-automation/tungsten-capture-formerly-kofax-capture) (1 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/tungsten-automation/power-pdf). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.