CVE-2025-0904

PDF-XChange Editor is affected by a vulnerability in its XPS file parsing that yields an out-of-bounds read and information disclosure. The flaw stems from insufficient validation of data inside XPS parsing, potentially allowing an attacker to disclose sensitive information on affected installati...

CVE-2025-0903 PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-0903

PDF-XChange Editor is affected by a heap-based buffer overflow in the RTF file parser that can lead to remote code execution. The flaw arises from insufficient validation of the length of user-supplied data before copying it into a fixed-length heap buffer. Exploitation requires user interaction ...

CVE-2025-0903 PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-0902 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-0902 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-0902

PDF-XChange Editor is affected by a vulnerability in the XPS file parsing module that can cause an out-of-bounds read and information disclosure. Root cause: insufficient validation of user-supplied data during XPS parsing, leading to reading beyond an allocated object. Impact: information disclo...

CVE-2025-0901 PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-0901

CVE-2025-0901 concerns PDF-XChange Editor. Connected sources confirm a vulnerability in the handling of Doc objects that enables an out-of-bounds read, which attackers can exploit to run code in the context of the affected process. The flaw arises from insufficient validation of user-supplied dat...

CVE-2025-0901 PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-12547

CVE-2024-12547 affects Tungsten Automation Power PDF, specifically the JPF file parsing component. The vulnerability arises from improper validation of user-supplied data, causing an out-of-bounds write past the end of an allocated object. An attacker can trigger remote code execution by convinci...

CVE-2024-12547 Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-12547 Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-12548

The CVE-2024-12548 entry describes a Use-After-Free in Tungsten Automation Power PDF when parsing JP2 files, caused by not validating object existence before operations. This can disclose sensitive information and, per sources, could be leveraged with other vulnerabilities to execute arbitrary co...

CVE-2024-12549

Summary (CVE-2024-12549) The vulnerability affects Tungsten Automation Power PDF and relates to the JP2 file parsing module. The issue is a failure to validate user-supplied data, causing an out-of-bounds read that can enable remote code execution in the context of the current process. Exploitati...

CVE-2024-12550 Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabili...

CVE-2024-12550 Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerabili...

CVE-2024-12551

Tungsten Automation Power PDF is affected by a JP2 file parsing flaw that can trigger an out-of-bounds read, allowing remote code execution. The issue arises from insufficient validation of JP2 file data in Power PDF, enabling an attacker to read past an allocated object and execute code in the p...

CVE-2025-0899

Summary: CVE-2025-0899 affects PDF-XChange Editor via an AcroForm Use-After-Free vulnerability. The flaw arises from not validating the existence of an object before performing operations in the AcroForms handling, enabling an attacker to execute arbitrary code in the current process. Impact: rem...

CVE-2025-0899 PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability

PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a maliciou...