Out-Of-Bounds Write Vulnerability in PDF-XChange Editor by Tracker Software Products

CVE-2025-6647

What is CVE-2025-6647?

This vulnerability arises from improper validation in the parsing of U3D files within PDF-XChange Editor. Attackers can exploit this flaw by directing users to visit a malicious webpage or open a compromised file, resulting in arbitrary code execution in the context of the affected application. This makes user interaction necessary for the attack to succeed, as the flaw allows writes beyond the allocated memory space, leading to potential system compromise.

References