This vulnerability (CVE-2025-34106) is a buffer overflow (CWE-119, CWE-120) in Burnaware PDF Shaper 3.5's PDFTools.exe component. It arises during the conversion of a specially crafted PDF to an image, enabling an attacker to execute arbitrary code under the user's context. The vulnerability has been confirmed on multiple Windows versions. The CVSS 4.0 base score is 8.4, indicating high severity, with attack vector local, low attack complexity, no privileges required, but user interaction needed. No known exploits in the wild have been reported, and no patch or remediation details are provided.

Successful exploitation can lead to arbitrary code execution with the privileges of the user running PDF Shaper. This could allow an attacker to execute malicious code on affected systems, potentially compromising confidentiality, integrity, and availability of the system. The vulnerability requires user interaction (opening a malicious PDF) and local access to the vulnerable application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted PDF files with PDF Shaper version 3.5. Consider using alternative tools or updated software versions if available.