CVE-2026-42958
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to execute arbitrary code in the context of the current process.
Risk Assessment
The risk for the organization includes potential system compromise by an attacker, which could lead to data theft, malware installation, or further privilege escalation.
Recommendation
It is recommended to immediately update the application to the latest version that includes a fix for the use-after-free vulnerability. Also, restrict processing of untrusted files until the update is applied.
Original NVD description (English source)
The application contains a use-after-free vulnerability that can be exploited to cause memory corruption while parsing specially crafted files. This could allow an attacker to execute arbitrary code in the context of the current process.