CVE Catalog

CVE-2026-57260

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.12%

2th percentile - higher than 2% of all known CVEs

Summary

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash.

Risk Assessment

The risk involves potential application crashes caused by malicious PDF files, leading to denial of service (DoS) and possible disruption of user operations.

Recommendation

It is recommended to immediately update the application to the latest patched version and implement PDF file validation mechanisms before opening.

Other vulnerabilities in PDF parser

Original NVD description (English source)

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS