ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-19772, a PDF type confusion flaw (CVSS 7.8) in Linux Mint Xreader allowing remote code execution via malicious files.
ZDI-26-715 describes a type confusion vulnerability when Linux Mint Xreader parses PDF files, allowing remote code execution. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The flaw is tracked as CVE-2026-19772 with a CVSS score of 7.8.
25