CVE-2026-92179

Received Received - Intake

PDF Architect PDF File Parsing Out-Of-Bounds Write RCE

Publication date: 2026-09-15

Last updated on: 2026-09-16

Assigner: Zero Day Initiative

Description

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29219.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-16

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-92179

EUVD

EUVD-2026-79136

Affected Vendors & Products

Vendor	Product	Version / Range
pdfforge	pdf_architect	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds write flaw in pdfforge PDF Architect that allows remote attackers to execute arbitrary code. It occurs during PDF file parsing due to improper validation of user-supplied data, leading to a write past the end of an allocated buffer. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page.

Detection Guidance

Detecting this vulnerability requires monitoring for suspicious PDF file parsing activities or unusual process behavior. Check for crashes or memory corruption errors when opening PDFs with PDF Architect. Use process monitoring tools like Process Explorer or Windows Event Viewer to track unexpected code execution. Ensure PDF Architect is updated to the latest version to avoid false positives.

Impact Analysis

If exploited, this vulnerability could allow attackers to run malicious code on your system with the same privileges as the PDF Architect process. This could lead to data theft, system compromise, or further network infiltration. Users are at risk if they interact with untrusted PDF files or websites.

Compliance Impact

This vulnerability could lead to unauthorized code execution on systems handling sensitive data, potentially exposing personal or protected health information. Such breaches may violate GDPR or HIPAA requirements for data confidentiality and integrity.

Mitigation Strategies

Restrict interaction with the vulnerable pdfforge PDF Architect software. Avoid opening untrusted PDF files or visiting suspicious websites that may trigger the vulnerability.

Hi! I’m here to help you understand CVE-2026-92179. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70