CVE-2026-92177

Received Received - Intake

PDF Architect PDF File Parsing Out-Of-Bounds Write RCE

Publication date: 2026-09-15

Last updated on: 2026-09-16

Assigner: Zero Day Initiative

Description

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28673.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-16

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-92177

EUVD

EUVD-2026-79138

Affected Vendors & Products

Vendor	Product	Version / Range
pdfforge	pdf_architect	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds write flaw in pdfforge PDF Architect that allows remote attackers to execute arbitrary code. It occurs during PDF file parsing due to insufficient validation of user-supplied data, enabling attackers to write past allocated memory. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page.

Detection Guidance

Detection of this vulnerability primarily involves monitoring for suspicious PDF file parsing activities or unusual system behavior. Since exploitation requires user interaction with a malicious file, check for any recently opened or downloaded PDF files from untrusted sources. Inspect system logs for crashes or memory corruption errors during PDF processing. Ensure PDF Architect is updated to the latest version to avoid exposure.

Impact Analysis

If exploited, this vulnerability could allow attackers to run malicious code on your system with the same privileges as the affected PDF Architect application. This could lead to data theft, system compromise, or further network infiltration. Users are at risk if they interact with untrusted PDF files or websites.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR or HIPAA requirements for data protection and confidentiality. Organizations using affected PDF Architect versions may face compliance breaches if exploited, requiring incident response and mitigation measures.

Mitigation Strategies

Restrict interaction with the affected pdfforge PDF Architect product. Avoid opening untrusted PDF files or visiting suspicious websites to prevent exploitation.

Hi! I’m here to help you understand CVE-2026-92177. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70