Out-Of-Bounds Read in Soda PDF Desktop by Icecream Apps

CVE-2025-14411

What is CVE-2025-14411?

The vulnerability in Soda PDF Desktop is related to improper validation when parsing PDF files. This weakness allows remote attackers to access sensitive data by enticing users to interact with malicious content, such as a compromised webpage or file. The flaw can potentially be exploited in conjunction with other vulnerabilities, opening the door for arbitrary code execution in the context of the application, thus posing significant security risks to users.

References