Out-Of-Bounds Read Vulnerability in PDF-XChange Editor by Tracker Software

CVE-2025-0906

What is CVE-2025-0906?

The vulnerability identified in PDF-XChange Editor occurs during the parsing of JB2 files, where inadequate validation of user-supplied data can lead to an out-of-bounds read. This flaw enables remote attackers to potentially disclose sensitive information by prompting a user to open a malicious file or visit a compromised webpage. Exploitation may allow the attacker to gather critical data and could be combined with other vulnerabilities for further damage.

References