Description
pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the handling of App objects. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28570.
Published: 2026-09-15
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Patch Now
AI Analysis

Impact

The flaw in pdfforge PDF Architect involves an out‑of‑bounds read in the handling of App objects, leading to remote code execution. The vulnerability, classified as CWE‑125, permits an attacker to run arbitrary code in the process context of the user. As a victim into visiting a malicious page or opening a malicious file.

Affected Systems

Affected product is pdfforge PDF Architect. No specific version information is provided, until a patch is applied.

Risk and Exploitability

The CVSS score of high severity. The EPSS score indicates a very low likelihood of exploitation (0.0017), and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires user interaction, typically by viewing a crafted web page or opening a malicious PDF. Once executed, the attacker can run code with the privileges of the current process. The lack of input validation is the root cause.

Generated by OpenCVE AI on September 20, 2026 at 14:24 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest vendor patch or upgrade to a fixed version of PDF Architect.
  • Disable or restrict the use of App objects in the application until the update is applied.
  • Prevent users from opening malicious or unknown PDF hazardous web content until the patch is deployed.

Generated by OpenCVE AI on September 20, 2026 at 14:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Pdfforge
Pdfforge pdf Architect
Vendors & Products Pdfforge
Pdfforge pdf Architect

Tue, 15 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 15 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Description pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of App objects. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28570.
Title pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability
Weaknesses CWE-125
References
Metrics cvssV3_0

{'score': 7.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Pdfforge Pdf Architect
cve-icon MITRE

Status: PUBLISHED

Assigner: zdi

Published:

Updated: 2026-09-16T03:57:24.190Z

Reserved: 2026-09-15T18:04:30.872Z

Link: CVE-2026-92176

cve-icon Vulnrichment

Updated: 2026-09-15T19:22:07.911Z

cve-icon NVD

Status : Deferred

Published: 2026-09-15T19:17:47.993

Modified: 2026-09-16T20:26:50.280

Link: CVE-2026-92176

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-20T14:30:18Z

Weaknesses