CVE-2025-0907

Summary

CVE-2025-0907 is a vulnerability affecting PDF-XChange Editor, which allows remote attackers to disclose sensitive information through an out-of-bounds read issue during JB2 file parsing. The flaw arises due to insufficient validation of user-supplied data, enabling attackers to read past the end of an allocated object. This vulnerability does not result in code execution on its own but could be utilized in conjunction with other exploits to carry out more serious attacks, requiring users to visit malicious pages or open malicious files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.