CVE-2026-30287

An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://deepthought.industries/	Product
https://github.com/Secsys-FDU/AF_CVEs/issues/16	Exploit Issue Tracking Third Party Advisory
https://play.google.com/store/apps/details?id=pdfscanner.scan.pdf.scanner.free	Product
https://secsys.fudan.edu.cn/	Not Applicable

Configurations

Configuration 1 (hide)

cpe:2.3:a:deepthought.industries:ace_scanner:1.4.5:*:*:*:*:android:*:*

History

No history.

Information

Published : 2026-04-01 14:16

Updated : 2026-06-17 10:32

NVD link : CVE-2026-30287

Mitre link : CVE-2026-30287

CVE.ORG link : CVE-2026-30287

JSON object : View

Products Affected

deepthought.industries

ace_scanner

CWE

CWE-73

External Control of File Name or Path

{"id": "CVE-2026-30287", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30287", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-01T19:10:21.830910Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-04-01T14:16:49.777", "references": [{"url": "https://deepthought.industries/", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/Secsys-FDU/AF_CVEs/issues/16", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://play.google.com/store/apps/details?id=pdfscanner.scan.pdf.scanner.free", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://secsys.fudan.edu.cn/", "tags": ["Not Applicable"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-73"}]}], "descriptions": [{"lang": "en", "value": "An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure."}], "lastModified": "2026-06-17T10:32:36.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:deepthought.industries:ace_scanner:1.4.5:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "C11A989B-E14D-4DB6-AC50-E4F4F07AB223"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}