CVE-2022-42373

CVE-2022-42373 is a critical vulnerability affecting PDF-XChange Editor, allowing remote attackers to execute arbitrary code. The flaw resides in the parsing of U3D files, where crafted data can cause a buffer overflow. Exploitation requires user interaction, typically by opening a malicious file or visiting a malicious page. This vulnerability carries a high CVSS score of 7.8 due to its potential for complete compromise of confidentiality, integrity, and availability, with a low attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.