Memory Corruption Vulnerability in Soda PDF Desktop

CVE-2025-14407

What is CVE-2025-14407?

Soda PDF Desktop is susceptible to a memory corruption vulnerability due to inadequate validation of user-supplied data during PDF file parsing. This flaw enables remote attackers to potentially disclose sensitive information by convincing users to open malicious PDF files or visit harmful web pages. Exploitation of this vulnerability could allow attackers to execute arbitrary code within the context of the affected application, amplifying the risks associated with information handling in vulnerable installations.

References