CVE-2022-42378

PDF-XChange Editor exposes a U3D parsing overflow: crafted U3D data can trigger a write past the end of an allocated buffer, enabling remote code execution in the target process. Exploitation requires user interaction (open a malicious file or visit a malicious page). Affected product/version det...