Information Disclosure Vulnerability in PDF-XChange Editor Software

CVE-2025-6655

What is CVE-2025-6655?

The vulnerability within PDF-XChange Editor arises from a flaw in the parsing of PRC files, which fails to properly validate user-supplied data. This oversight can lead to an out-of-bounds read, allowing remote attackers to disclose sensitive information. User interaction is required for exploitation, as the victim must either access a malicious web page or open a compromised file. This flaw may also allow an attacker to leverage it in combination with other weaknesses to execute arbitrary code within the current process context.

References