VULNERABILITY INTELLIGENCE

CVE-2021-40160

CVSS score7.8 HIGH

EPSS probability1.60%

CISA KEVNot currently listed

Published2021-12-23

Last modified2026-06-17

Description

PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploited to execute arbitrary code.