CVE-2022-42406

CVE-2022-42406 is a sensitive information disclosure vulnerability affecting PDF-XChange Editor, specifically within its EMF file parsing. Exploitation requires user interaction, where a victim must open a malicious EMF file, triggering a read past the end of an allocated buffer. Rated Medium (CVSS 5.5), the attack is local with low complexity, potentially leading to high confidentiality impact, and could be chained with other vulnerabilities for arbitrary code execution. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.