Out-of-Bounds Read Vulnerability in PDF-XChange Editor by Tracker Software Products
CVE-2025-6652

3.3LOW

Key Information:

Vendor

PDF-xchange
Status
PDF-xchange Editor
Vendor
CVE Published:
25 June 2025

What is CVE-2025-6652?

This vulnerability in PDF-XChange Editor arises from improper validation during the parsing of PRC files, leading to the potential disclosure of sensitive information. Remote attackers can exploit this flaw by enticing users to visit malicious websites or open harmful files. The weakness may allow attackers to read beyond the allocated memory space, which could be exploited in conjunction with other vulnerabilities to execute arbitrary code within the affected application context.

Affected Version(s)

PDF-XChange Editor 10.5.2.395

References

https://www.zerodayinitiative.com/advisories/ZDI-25-437/
x_research-advisory
https://www.pdf-xchange.com/support/security-bulletins.html
vendor-advisory

CVSS V3.0

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-6652 : Out-of-Bounds Read Vulnerability in PDF-XChange Editor by Tracker Software Products