Out-Of-Bounds Write Vulnerability in PDF-XChange Editor by Tracker Software Products
CVE-2025-6659

7.8HIGH

Key Information:

Vendor

PDF-xchange
Status
PDF-xchange Editor
Vendor
CVE Published:
25 June 2025

What is CVE-2025-6659?

The vulnerability arises from a flaw in the parsing mechanism of PRC files within PDF-XChange Editor. The absence of adequate validation for user-supplied data can allow an attacker to write beyond the allocated memory buffer, subsequently executing arbitrary code in the context of the affected process. Exploitation of this vulnerability necessitates user interaction, as a target must either open a harmful PDF file or visit a malicious webpage that utilizes this flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PDF-XChange Editor 10.5.2.395

References

https://www.zerodayinitiative.com/advisories/ZDI-25-445/
x_research-advisory
https://www.pdf-xchange.com/support/security-bulletins.html
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.