CVE-2025-0903

Summary

CVE-2025-0903 is a critical heap-based buffer overflow vulnerability affecting PDF-XChange Editor. This issue, identified as ZDI-CAN-25421, arises due to insufficient validation of user-supplied data in RTF file parsing. An attacker can exploit this vulnerability by crafting a malicious RTF file, leading to arbitrary code execution on affected systems. User interaction is required, as the target must visit a malicious webpage or open the malicious file for the exploit to take effect.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.