Description
Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
References
- slimpdf-branch-code-execution(71097) vdb-entry
- VU#275036 third-party-advisory