PDF-XChange Editor Out-Of-Bounds Read Vulnerability by Tracker Software

CVE-2025-0901

Summary

A security vulnerability exists in PDF-XChange Editor that allows attackers to execute arbitrary code on affected systems. The flaw arises from inadequate validation of user-supplied data when handling Doc objects, leading to a potential out-of-bounds read. This can enable an attacker to read data past the allocated buffer, allowing them to execute code within the context of the application. Successful exploitation necessitates that a user interacts with a malicious PDF file or webpage, making awareness and caution critical.

References