CVE-2022-42386

CVE-2022-42386 is a sensitive information disclosure vulnerability affecting PDF-XChange Editor, specifically within its U3D file parsing component. A remote attacker can exploit this by crafting a malicious U3D file that, when opened by a user, triggers a read past the end of an allocated buffer. This vulnerability has a CVSS score of 5.5 (Medium), indicating a low attack complexity requiring user interaction, and primarily impacts confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.