CVE-2022-42388

CVE-2022-42388 is a sensitive information disclosure vulnerability affecting PDF-XChange Editor, specifically within its U3D file parsing. Successful exploitation requires user interaction, where a victim must open a malicious file or visit a malicious page. The vulnerability is rated Medium (CVSS 5.5) due to its local attack vector and user interaction requirement, but it can lead to high confidentiality impact by allowing a read past the end of an allocated buffer, potentially enabling arbitrary code execution when chained with other flaws. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.