VULNERABILITY INTELLIGENCE

CVE-2018-6462

CVSS score7.8 HIGH
EPSS probability2.46%
CISA KEVNot currently listed
Published2018-01-31
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Tracker PDF-XChange Viewer and Viewer AX SDK before 2.5.322.8 mishandle conversion from YCC to RGB colour spaces by calculating on the basis of 1 bpc instead of 8 bpc, which might allow remote attackers to execute arbitrary code via a crafted PDF document.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references