PT-2026-29531 · Unknown · Ora Tools Pdf Reader

Secsys-Fdu · Published 2026-04-01 · Updated 2026-04-01 · CVE-2026-30291

Positive Technologies · (AI Summary)

CVSS v3.1

8.4

High

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ora Tools PDF Reader versions 4.3.5

Description A flaw exists in Ora Tools PDF Reader that allows overwriting critical internal files through the file import process. This could lead to arbitrary code execution or information disclosure.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2026-30291

Affected Products

Ora Tools Pdf Reader

References · 6

• 🔥 https://github.com/Secsys-FDU/AF_CVEs/issues/18 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-30291 · Security Note
• https://secsys.fudan.edu.cn · Note
• https://play.google.com/store/apps/details?id=pdf.reader.editor.office.ora · Note
• https://oratools.github.io · Note
• https://twitter.com/CVEnew/status/2039372077820412309 · Twitter Post