CVE-2026-30292 is an arbitrary file overwrite vulnerability identified in Docudepot PDF Reader: PDF Viewer APP version 1.0.34. This vulnerability arises from improper handling of file paths during the file import process, allowing an attacker to overwrite critical internal files within the application or system. The flaw is categorized under CWE-73, which involves improper neutralization of file path elements, enabling path traversal or file overwrite attacks. Exploitation does not require any privileges or user interaction, making it easier for an attacker with local access to compromise the system. By overwriting key files, an attacker can execute arbitrary code with the privileges of the application or cause information exposure by manipulating configuration or data files. The CVSS v3.1 base score is 8.4, reflecting high severity due to the combined impact on confidentiality, integrity, and availability, and the ease of exploitation. No patches or known exploits are currently reported, but the vulnerability poses a significant risk to affected users. The lack of affected version details suggests the issue may be specific to the stated version or undisclosed versions. Organizations relying on this PDF reader should be aware of the risk and prepare to deploy fixes once available.

The vulnerability allows attackers to overwrite critical files, potentially leading to arbitrary code execution, which can compromise the entire system running the vulnerable PDF reader. This can result in unauthorized access to sensitive information, disruption of services, and persistent control over affected systems. The impact spans confidentiality (data exposure), integrity (file tampering), and availability (application or system disruption). Since no authentication or user interaction is required, any local attacker or malware with access to the system can exploit this flaw, increasing the risk of lateral movement or privilege escalation within networks. Organizations handling sensitive documents or relying on Docudepot PDF Reader for secure document viewing face significant operational and reputational risks if exploited.

1. Restrict file import sources to trusted locations and users to minimize exposure to malicious files. 2. Implement strict file path validation and sanitization to prevent path traversal and file overwrite attempts. 3. Monitor file system changes, especially in directories used by the PDF reader, to detect unauthorized modifications. 4. Employ application whitelisting and endpoint protection solutions to detect and block suspicious activities related to the PDF reader. 5. Isolate systems running the vulnerable application to limit potential lateral movement in case of compromise. 6. Regularly back up critical files and configurations to enable recovery from potential overwrites. 7. Engage with the vendor for timely patches and apply updates as soon as they become available. 8. Educate users about the risks of importing files from untrusted sources and enforce least privilege principles on affected systems.