Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

CVE-2022-42410

CVE-2022-42410 affects PDF-XChange Editor. The flaw is an out-of-bounds write in parsing of PGM files, enabling remote code execution when a user opens a crafted PGM file or visits a malicious page. Requires user interaction; attack vector is local (per CVSS context) but remote code execution in ...