CVE-2026-92178

Received Received - Intake

Memory Corruption in PDF Architect PDF File Parsing

Publication date: 2026-09-15

Last updated on: 2026-09-16

Assigner: Zero Day Initiative

Description

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28916.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-16

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-92178

EUVD

EUVD-2026-79137

Affected Vendors & Products

Vendor	Product	Version / Range
pdfforge	pdf_architect	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory corruption issue in pdfforge PDF Architect that allows remote attackers to execute arbitrary code. It occurs when the software fails to properly validate data while parsing PDF files, leading to memory corruption. Exploitation requires user interaction, such as opening a malicious PDF file or visiting a harmful webpage.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual PDF file parsing behavior or suspicious processes initiated by PDF Architect. Check for unexpected memory corruption errors in logs or crashes when opening PDF files. Use process monitoring tools like Process Explorer or Windows Event Viewer to track PDF Architect activity.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your system with the same privileges as the PDF Architect application. This could lead to unauthorized access, data theft, or further compromise of your system. Users are at risk if they open untrusted PDF files or visit malicious websites.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR or HIPAA. Organizations using PDF Architect may face legal penalties, reputational damage, or loss of trust if sensitive data is compromised due to this flaw.

Mitigation Strategies

Immediately restrict user interaction with PDF Architect. Avoid opening untrusted PDF files or visiting suspicious websites. Update to the latest patched version if available. If no patch exists, consider disabling PDF Architect or replacing it with a secure alternative until a fix is released.

Hi! I’m here to help you understand CVE-2026-92178. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70