Information Disclosure Vulnerability in PDF-XChange Editor by Tracker Software Products

CVE-2025-0909

Summary

The vulnerability arises from improper validation of user-supplied data during the parsing of XPS files within PDF-XChange Editor. This flaw can allow remote attackers to disclose sensitive information by tricking users into visiting malicious pages or opening compromised files. Exploitation requires user interaction but can potentially lead to further attacks by enabling code execution within the vulnerable process context.

References