CVE-2022-42397

CVE-2022-42397 is a sensitive information disclosure vulnerability affecting PDF-XChange Editor, stemming from a read past the end of an allocated buffer during XPS file parsing. Exploitation requires user interaction, where a victim must open a malicious XPS file. Rated Medium severity (CVSS 5.5), this local attack vector has low complexity but can lead to high confidentiality impact, potentially enabling arbitrary code execution when chained with other vulnerabilities. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.