CVE-2020-7374: Documalis Free PDF Editor / Free PDF Scanner Stack Based Buffer Overflow

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-08-12 · updated 2026-06-17
Weakness: CWE-120

Description

Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the user running the Documalis Free PDF Editor or Documalis Free PDF Scanner software.

Affected products

Documalis Free PDF Editor: 5.7.2.26
Documalis Free PDF Scanner: 5.7.2.122

References

https://github.com/rapid7/metasploit-framework/pull/13517
https://github.com/rapid7/metasploit-framework/pull/13517

Get alerted when CVE-2020-7374 or the next vulnerability affects your stack