Pdf Architect
Approved changes feed: RSS · Atom
cpe:2.3:a:pdfforge:pdf_architect:9.1.74.23030:*:*:*:*:*:*:*
part: a version: 9.1.74.23030 update: *
| Vendor | Pdfforge (60b7d01a-33ef-50be-91d4-54d0f5f23682) |
|---|---|
| Product | Pdf Architect (6e625e67-2c01-5c50-b50e-1cd08b5b166f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:sourceforge/pdf-architect |
purl2cpe | 2026-06-01 10:12:42.012560 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-14421 |
vulnerable | 2026-06-08 07:06:34.415563 |
pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
LOW (3.3)
pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-27915.
Published: 2025-12-23T21:22:59.811Z
Updated: 2025-12-31T21:06:13.023Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14420 |
vulnerable | 2026-06-08 07:06:34.415283 |
pdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability
HIGH (7.8)
pdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of CBZ files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27514.
Published: 2025-12-23T21:22:54.084Z
Updated: 2025-12-31T21:00:56.843Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14419 |
vulnerable | 2026-06-08 07:06:34.414826 |
pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
HIGH (7.8)
pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27902.
Published: 2025-12-23T21:22:50.077Z
Updated: 2025-12-30T21:21:34.992Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14418 |
vulnerable | 2026-06-08 07:06:34.414578 |
pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability
HIGH (7)
pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the processing of XLS files. The issue results from allowing the execution of dangerous script without user warning. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27502.
Published: 2025-12-23T21:22:46.165Z
Updated: 2025-12-30T21:21:18.580Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14417 |
vulnerable | 2026-06-08 07:06:34.414096 |
pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability
HIGH (7.8)
pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the implementation of the Launch action. The issue results from allowing the execution of dangerous script without user warning. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27501.
Published: 2025-12-23T21:22:39.324Z
Updated: 2025-12-30T21:20:58.670Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14416 |
vulnerable | 2026-06-08 07:06:34.413632 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.