CVE-2026-13127
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
The vulnerability occurs when the application opens a PDF file, and JavaScript rewrites the document, modifying the page structure and invalidating page objects. Thumbnails still use these invalid objects, ultimately causing the application to crash.
Risk Assessment
The risk involves the possibility of intentionally crashing the application by opening a crafted PDF file, which can lead to user workflow interruption and potential loss of unsaved data.
Recommendation
It is recommended to update the application to the latest version that includes a fix preventing thumbnails from using invalidated page objects. If no patch is available, restrict opening PDF files from untrusted sources.
Original NVD description (English source)
The application opens the PDF file. JavaScript then rewrites the document to modify the page structure, resulting in the invalidation of the page objects. However, the thumbnails still use the invalid page objects, ultimately causing the application to crash.