EIP-2026-115941

The document describes a heap memory corruption vulnerability in Nitro PDF (versions 10.5.7.32 and lower, and Nitro Reader 5.5.3.1 and lower) caused by a specially crafted PDF with an invalid /Domain in FunctionType 0. The vulnerability allows remote code execution when a user opens a malicious file.