CVE-2022-41143

CVE-2022-41143 affects PDF-XChange Editor and stems from an out-of-bounds write when parsing U3D files. Crafted U3D data can cause a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a ...