CVE-2018-7264

The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and sign errors, allowing a remote attacker to execute arbitrary code on vulnerable applications using the ActivePDF Toolkit to process untrusted images.

• CWE-787

• http://seclists.org/fulldisclosure/2018/Feb/74Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/44251/Exploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Feb/74Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/44251/Exploit, Third Party Advisory, VDB Entry

Published

Feb 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7254The ParseCaffHeaderConfig function of the cli/caff.c file of…
• CVE-2018-7259The FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320…
• CVE-2018-7260Cross-site scripting (XSS) vulnerability in db_central_colum…
• CVE-2018-7261There are multiple Persistent XSS vulnerabilities in Radiant…
• CVE-2018-7262In Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civet…
• CVE-2018-7263The mad_decoder_run() function in decoder.c in Underbit libm…
• CVE-2018-7265Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG f…
• CVE-2018-7268MagniComp SysInfo before 10-H81, as shipped with BMC BladeLo…
• CVE-2018-7269The findByCondition function in framework/db/ActiveRecord.ph…
• CVE-2018-7271An issue was discovered in MetInfo 6.0.0. In install/install…
• CVE-2018-7272The REST APIs in ForgeRock AM before 5.5.0 include SSOToken …
• CVE-2018-7273In the Linux kernel through 4.15.4, the floppy driver reveal…