Out-Of-Bounds Read Vulnerability in Soda PDF Desktop by LULU Software

CVE-2025-14410

What is CVE-2025-14410?

An out-of-bounds read vulnerability in Soda PDF Desktop could allow remote attackers to disclose sensitive user information. This security issue arises during the parsing of PDF files due to insufficient validation of user-supplied data, leading to a read operation that surpasses allocated object boundaries. Exploitation requires user interaction, as victims must either visit a malicious webpage or open a compromised file. Attackers may exploit this vulnerability in combination with other security flaws to execute arbitrary code within the application context.

References