CVE-2025-0902

Summary

CVE-2025-0902 is an Information Disclosure vulnerability affecting PDF-XChange Editor. This issue stems from improper validation of user-supplied data during XPS file parsing, leading to an Out-of-Bounds Read. The vulnerability enables remote attackers to disclose sensitive information when users visit malicious web pages or open infected files. While this flaw does not directly result in Arbitrary Code Execution, it can be combined with other vulnerabilities to achieve that outcome. (ZDI-CAN-25405)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.