CVE-2025-6654

🗓️ 25 Jun 2025 21:42:05Reported by zdiType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 13 Views

CVE-2025-6654 allows remote code execution in PDF-XChange Editor via PRC file parsing vulnerability.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-6654	25 Jun 202503:00	–	circl
CNNVD	PDF-XChange Editor 缓冲区错误漏洞	25 Jun 202500:00	–	cnnvd
CNVD	PDF-XChange Editor Code Execution Vulnerability (CNVD-2025-16301)	27 Jun 202500:00	–	cnvd
Cvelist	CVE-2025-6654 PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	25 Jun 202521:42	–	cvelist
EUVD	EUVD-2025-19156	3 Oct 202520:07	–	euvd
NVD	CVE-2025-6654	25 Jun 202522:15	–	nvd
OSV	CVE-2025-6654	25 Jun 202522:15	–	osv
Tenable Nessus	PDF-XChange Editor < 10.6.0.396 Multiple Vulnerabilities	27 Jun 202500:00	–	nessus
Positive Technologies	PT-2025-26898 · Unknown · Pdf-Xchange Editor	21 Mar 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6654	27 Jun 202522:18	–	redhatcve

NVD

Vulners

Node

pdf-xchange pdf-toolsMatch10.5.2.395

pdf-xchange pdf-xchange_editorMatch10.5.2.395

[
  {
    "vendor": "PDF-XChange",
    "product": "PDF-XChange Editor",
    "versions": [
      {
        "version": "10.5.2.395",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-25-439/
pdf-xchange	www.pdf-xchange.com/support/security-bulletins.html

01 Jul 2025 19:30Current

7.8High risk

Vulners AI Score7.8

CVSS 37.8

EPSS0.00251

SSVC

CWE-787