This vulnerability is a buffer overflow (CWE-119) in PDF Shaper versions 3.5 and 3.6, specifically in the PDFTools.exe component used for converting PDFs to images. When a user opens a maliciously crafted PDF file and uses the conversion feature, the overflow can be triggered, allowing an attacker to execute arbitrary code under the user's context. The vulnerability has been verified on multiple Windows versions, indicating broad impact across legacy and modern systems. The CVSS 4.0 base score is 8.4, reflecting high severity with local attack vector, low attack complexity, no privileges required, but user interaction needed.

Successful exploitation allows arbitrary code execution with the privileges of the logged-in user, potentially leading to system compromise or unauthorized actions. The vulnerability affects multiple Windows versions and can be triggered by opening a crafted PDF file and converting it to an image. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening untrusted PDF files with the 'Convert PDF to Image' feature in PDF Shaper version 3.5. Consider disabling or restricting use of this functionality if possible.