Out-Of-Bounds Read Vulnerability in Soda PDF Desktop by LULU Software

CVE-2025-14410

What is CVE-2025-14410?

An out-of-bounds read vulnerability in Soda PDF Desktop could allow remote attackers to disclose sensitive user information. This security issue arises during the parsing of PDF files due to insufficient validation of user-supplied data, leading to a read operation that surpasses allocated object boundaries. Exploitation requires user interaction, as victims must either visit a malicious webpage or open a compromised file. Attackers may exploit this vulnerability in combination with other security flaws to execute arbitrary code within the application context.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References