Information Disclosure Vulnerability in pdfforge PDF Architect

CVE-2025-14421

What is CVE-2025-14421?

The vulnerability affects pdfforge PDF Architect and is related to improper validation during PDF file parsing. This flaw enables remote attackers to potentially disclose sensitive information on systems running the affected versions. To exploit this vulnerability, user interaction is necessary, such as visiting a malicious website or opening a crafted PDF file. This shortcoming results in the possibility of reading past the end of allocated memory objects, which could allow an attacker to gain access to secured information. The issue could potentially be worsened if exploited in conjunction with other vulnerabilities, leading to further security risks within the affected system.

References