The vulnerability exists in the PDF Attachment Saving Handler of Linux Mint Xreader, affecting the g_file_get_child function in ev-window.c. By manipulating the attachment argument, an attacker can cause a path traversal, potentially reading or writing arbitrary files. The weakness is identified as CWE-22, reflecting improper validation of file names during path construction. The consequence is that an attacker could gain unauthorized access to files on the file system or overwrite critical files when the exploited paths are resolved by the operating system.

Linux Mint Xreader versions up to 4.6.9 are affected. The issue is present in all builds that include the PDF attachment handling code prior to the removal of EPUB support. Any installation of Xreader 4.6.9 or earlier that allows PDF attachments is potentially vulnerable.

The CVSS score of 5.3 indicates moderate severity, while the EPSS score is not available and the vulnerability is not listed in CISAV. Attackers can exploit this remotely by providing a crafted PDF attachment; no additional conditions are cited, and the exploit is publicly disclosed. The risk is therefore moderate but could lead to serious data compromise if the attacker succeeds in writing to privileged locations.