THREATOPS

THREAT OPS › Threat News › ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

lowzdi_publishedPublished 2026-06-11

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MATE Desktop Atril Document Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-52849.

MITRE ATT&CK techniques

Malicious FileT1204.002

Indicators of compromise

CVE-2026-52849cve

Original source: http://www.zerodayinitiative.com/advisories/ZDI-26-360/