Soda PDF Desktop Out-of-Bounds Write Vulnerability Leading to Remote Code Execution

A remote code execution vulnerability has been identified in Soda PDF Desktop, specifically within the PDF file parsing component. This issue arises from improper validation of user-supplied data, allowing for an out-of-bounds write that can be exploited to execute arbitrary code in the context of the current process. Exploitation requires user interaction, such as opening a malicious PDF file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

There is no specific patch available for this vulnerability. Users are advised to limit interactions with Soda PDF Desktop until the issue is addressed.