Out-Of-Bounds Write Vulnerability in PDF-XChange Editor by Tracker Software Products

CVE-2025-0910

What is CVE-2025-0910?

The vulnerability in PDF-XChange Editor arises from the parsing of U3D files, where the application fails to properly validate user-supplied data. This oversight can allow attackers to execute arbitrary code by causing the application to write past the end of an allocated object. Successful exploitation requires user interaction, such as visiting a malicious page or opening a crafted file, enabling the attacker to leverage the flaw in the context of the current process.

References