CVE-2025-0901

Summary

CVE-2025-0901 is a remote code execution vulnerability affecting PDF-XChange Editor. The issue lies in the improper handling of Doc objects, where user-supplied data lacks validation, leading to a read out-of-bounds condition. This can result in the execution of arbitrary code in the context of the affected process. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. This vulnerability, identified as ZDI-CAN-25372, poses a significant risk to installations of PDF-XChange Editor.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.