CVE-2018-7264

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

12%p96

Published

Feb 28, 2018 (Feb 28, 2018)

Modified

Jun 17, 2026

Description

The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images.

Vendors: activepdf
Products: activepdf toolkit
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.3%)

In the news0 stories

No ingested article mentions this CVE yet.