Out-Of-Bounds Read Information Disclosure Vulnerability in PDF-XChange Editor by Tracker Software

CVE-2025-6657

What is CVE-2025-6657?

The vulnerability present in PDF-XChange Editor involves improper validation of user-supplied data during the parsing of PRC files. This flaw can lead to the disclosure of sensitive information if exploited by remote attackers. User interaction is necessary, as victims must either visit a malicious webpage or open a malicious file. By leveraging this vulnerability alongside others, an attacker could potentially execute arbitrary code within the current process.

References