This vulnerability is an instance of a use after free vulnerability when manipulating an internal data structure. The vulnerability is triggered by a malformed PDF file (invalid object reference and malformed cross-references) that leads to dangling pointer when manipulating internal page caching mechanism. It can trigger access violation exception in internal caching because of a dangling reference left as a consequence of freeing an object. |