Technical impact
The vulnerability is an arbitrary file overwrite flaw (CWE‑73) in Deep Thought Industries ACE Scanner PDF Scanner version 1.4.5. By manipulating the file import process, an attacker can replace critical internal files, which may enable arbitrary code execution or reveal sensitive information contained within the application.
Affected Systems
The affected product is the Deep Thought Industries ACE Scanner PDF Scanner for Android, version 1.4.5; this is the only version listed in the provided CPE string.
Risk and Exploitability
The CVSS score is 8.4, indicating high severity, while the EPSS score is below 1%, implying a lower probability of exploitation in the short term. This vulnerability is not listed in the CISA KEV catalog. The likely attack vector is application‑level, requiring the attacker to supply a crafted PDF file that a user imports into the application; this inference is based on the description of the file import process and is not directly stated in the input.
