CVE-2022-37372

CVE-2022-37372 is a remote code execution vulnerability affecting PDF-XChange Editor, stemming from a flaw in PDF file parsing. An attacker can exploit this by crafting a malicious PDF, which, when opened by a user, triggers a write past the end of a buffer, allowing code execution in the context of the current process. Rated 7.8 High on CVSS, it requires user interaction (UI:R) and local access (AV:L), but has high impact on confidentiality, integrity, and availability (C:H, I:H, A:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this vulnerability.