Description
Detects a PDF exploiting CVE-2026-81977, an integer underflow in Adobe Acrobat Reader's content parsing that can allow code execution. The rule matches the crafted structures that public exploits use to underflow length calculations and corrupt memory.