CVE-2022-42389

CVE-2022-42389 is a sensitive information disclosure vulnerability affecting PDF-XChange Editor, specifically within its U3D file parsing. An attacker can craft a malicious U3D file to trigger a read past the end of a buffer, requiring user interaction to open the file or visit a malicious page. Rated Medium severity (CVSS 5.5), this vulnerability could lead to sensitive information disclosure and, when chained with other flaws, arbitrary code execution. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.