Remote Code Execution Vulnerability in PDFsam Enhanced App

CVE-2025-14401

What is CVE-2025-14401?

The PDFsam Enhanced App has a vulnerability that permits remote attackers to execute arbitrary code on installations by leveraging an out-of-bounds read condition. This flaw arises from inadequate validation of user-supplied data in handling App objects. While user interaction is necessary, an attacker can exploit this issue by enticing a victim to visit a malicious webpage or open a harmful file. Successful exploitation can lead to code execution in the context of the current process, posing significant risks to users.

References