PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-42045

Summary

A vulnerability exists in PDF-XChange Editor that is triggered during the parsing of J2K files. This flaw arises from inadequate validation of user-supplied data, potentially leading to a read operation beyond the memory boundaries of an allocated object. Attackers can exploit this issue to execute arbitrary code within the context of the affected application, requiring user interaction such as visiting a malicious webpage or opening a compromised file. For further details, refer to the vendor's security bulletin.

References