CVE-2025-14409

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-14409

CVE-2025-14409 concerns Soda PDF Desktop. The issue is a parsing flaw in PDF handling where lack of validation of user-supplied data allows an out-of-bounds write past an allocated buffer, leading to remote code execution. Descriptions from multiple sources (including Red Hat, NVD, ENISA EUVD, an...