# CVE-2026-92177: pdfforge PDF Architect out-of-bounds write in PDF parsing

Source: https://junglewise.ai/threats/cve-2026-92177-pdfforge-pdf-architect-out-of-bounds-write-in-pdf-parsing  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-15. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-92177 · Severity: high · CVSS 7.8 · Published 2026-09-15

pdfforge PDF Architect is a PDF document creation and editing tool. The application contains a memory corruption vulnerability in its PDF file parsing that allows attackers to execute arbitrary code when a user opens a malicious PDF document. This could enable complete system compromise and unauthorized access to sensitive documents.

Technologies: [Pdfforge PDF Architect](https://junglewise.ai/threats/technologies/pdf-architect). Vendors: [Pdfforge](https://junglewise.ai/threats/vendors/pdfforge).

## Quick answers

**Is CVE-2026-92177 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-92177 being exploited in the wild.

**How severe is CVE-2026-92177?** High severity, with a CVSS score of 7.8, published 15 September 2026.

**Which products and versions are affected?** pdfforge PDF Architect.

**Is there a fix for CVE-2026-92177?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-92177 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-92177?** Check whether you run Pdfforge PDF Architect. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an out-of-bounds write flaw in PDF Architect's PDF file parsing logic. The root cause is insufficient validation of user-supplied data in PDF files, allowing an attacker to write past the end of an allocated buffer. Exploitation requires user interaction—the target must open a malicious PDF file via email attachment, web download, or direct file access. A successful exploit executes arbitrary code in the application's process context, potentially allowing full system compromise. Patches are expected from pdfforge; users should currently avoid opening untrusted PDF files in this product.

## Affected products

- pdfforge PDF Architect

## Timeline

- 2026-01-27: disclosed: Vulnerability reported to vendor
- 2026-03-23: other: Vendor confirmed receipt of report
- 2026-08-31: advisory: ZDI-26-612 coordinated public advisory release

## References

- [https://www.zerodayinitiative.com/advisories/ZDI-26-612/](https://www.zerodayinitiative.com/advisories/ZDI-26-612/)

## Related threats

- [pdfforge PDF Architect privilege escalation in activation-service](https://junglewise.ai/threats/cve-2026-92180-pdfforge-pdf-architect-privilege-escalation-in-activation-service)
- [pdfforge PDF Architect out-of-bounds write in PDF parsing](https://junglewise.ai/threats/cve-2026-92179-pdfforge-pdf-architect-out-of-bounds-write-in-pdf-parsing)
- [pdfforge PDF Architect memory corruption in PDF parsing](https://junglewise.ai/threats/cve-2026-92178-pdfforge-pdf-architect-memory-corruption-in-pdf-parsing)
- [pdfforge PDF Architect App object out-of-bounds read remote code execution](https://junglewise.ai/threats/cve-2026-92176-pdfforge-pdf-architect-app-object-out-of-bounds-read-remote-code)
- [pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability…](https://junglewise.ai/threats/cve-2025-14421-pdfforge-pdf-architect-pdf-file-parsing-out-of-bounds-read)