SAP 3D Visual Enterprise Author Buffer Overflow Vulnerability (CNVD-2022-69695)

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and can be exploited by an attacker to vulnerability via specially crafted files (.pdf, PDFPublishing.dll), triggering remote code execution when the payload forces a stack-based overflow or reuses a dangling pointer to an overwritten space in memory.