Out-Of-Bounds Write Vulnerability in PDF-XChange Editor by Tracker Software Products

CVE-2025-6659

What is CVE-2025-6659?

The vulnerability arises from a flaw in the parsing mechanism of PRC files within PDF-XChange Editor. The absence of adequate validation for user-supplied data can allow an attacker to write beyond the allocated memory buffer, subsequently executing arbitrary code in the context of the affected process. Exploitation of this vulnerability necessitates user interaction, as a target must either open a harmful PDF file or visit a malicious webpage that utilizes this flaw.

References