Gonitro

Gonitro maintains a narrowly focused portfolio of PDF creation, editing, and viewing applications—Nitro Pro, Nitro PDF Pro, Nitro Reader, and related products—that serve both enterprise and consumer audiences. Despite the modest product count, the vendor's presence in the vulnerability landscape reflects the widespread deployment of these applications and the complexity of PDF parsing and rendering. The recurring weakness classes affecting this vendor—out-of-bounds writes, use-after-free conditions, heap-based buffer overflows, integer overflows, and NULL pointer dereferences—are characteristic of memory-safety challenges in native PDF processing engines. Public exploit code has emerged for several of this vendor's vulnerabilities, underscoring the appeal of PDF readers as attack vectors for document-based exploitation. Defenders should monitor Gonitro's updates for its PDF products and prioritize patching where these applications handle untrusted documents; current severity, exploitation activity, and exposure counts are shown alongside this summary.