CVE-2023-32159

CVE-2023-32159 affects PDF-XChange Editor. The vulnerability stems from PDF file parsing that can trigger an out-of-bounds write, enabling remote code execution when a user opens a malicious file or visits a crafted page. Exploitation requires user interaction and can execute code with the curren...

CVE-2023-42110

CVE-2023-42110 describes an EMF file parsing vulnerability in PDF-XChange Editor that yields an out-of-bounds read, enabling information disclosure. The flaw stems from inadequate validation of EMF data during parsing, potentially allowing a read past the end of an allocated object. Exploitation ...

CVE-2024-8816

CVE-2024-8816 affects PDF-XChange Editor. The vulnerability lies in the U3D file parsing code, where the software fails to validate the existence of an object before performing operations, enabling information disclosure and potentially enabling arbitrary code execution when combined with other f...

CVE-2023-42079

PDF-XChange Editor contains an uninitialized memory vulnerability in the J2K file parser. The flaw, caused by lack of proper initialization before memory access, can allow disclosure of sensitive information and, in conjunction with other vulnerabilities, may enable arbitrary code execution in th...

CVE-2024-8821

CVE-2024-8821 affects PDF-XChange Editor via the U3D file parsing path. The flaw is a Use-After-Free in the U3D parser caused by not validating the existence of an object before operating on it, enabling information disclosure on affected installs. User interaction is required (target must visit ...

CVE-2023-42074

PDF-XChange Editor contains a Type Confusion vulnerability in the addScript method that can lead to remote code execution. The flaw arises from inadequate validation of user-supplied data, enabling an attacker to execute code in the context of the current process. Exploitation requires user inter...

CVE-2023-42111

PDF-XChange Editor contains a vulnerability in JPG file parsing that can cause an out-of-bounds read due to insufficient input validation. This flaw can enable remote code execution and requires user interaction (e.g., opening a malicious file or visiting a malicious page). Multiple sources (ZDI-...

CVE-2024-27329

PDF-XChange Editor is affected by an XPS file parsing Out-Of-Bounds Read Information Disclosure vulnerability. The flaw results from insufficient validation of user-supplied data while parsing XPS files, allowing a read past the end of an allocated object and potential information disclosure. Exp...

CVE-2024-8847

PDF-XChange Editor is affected by CVE-2024-8847: Doc Object handling flaw causes an out-of-bounds read, enabling remote code execution. The issue arises from inadequate validation of user-supplied data in Doc objects, allowing code execution in the process context. Exploitation requires user inte...

CVE-2025-2231

CVE-2025-2231 affects PDF-XChange Editor. The vulnerability is an out-of-bounds read in the RTF file parsing path that can allow remote code execution in the editor. Root cause: improper validation of user-supplied data leading to reading past the end of an allocated buffer. Exploitation requires...

CVE-2023-42041

CVE-2023-42041 is a Use-After-Free vulnerability in PDF-XChange Editor related to annotation handling. The flaw stems from failing to validate the existence of an Annotation object before operating on it, enabling an attacker to execute arbitrary code with the current process once the user visits...

CVE-2023-42077

PDF-XChange Editor is affected by a heap-based buffer overflow in EMF file parsing, enabling remote code execution when a user opens a malicious EMF-containing file or visits a malicious page. The flaw arises from insufficient validation of the length of user-supplied data before copying into a f...

CVE-2024-27327

CVE-2024-27327 affects PDF-XChange Editor. The issue is an out-of-bounds write in PDF parsing due to insufficient validation of input data, which can allow arbitrary code execution in the context of the current process when a user opens a malicious PDF or visits a malicious page. Exploitation req...

CVE-2024-8812

PDF-XChange Editor is affected by an U3D file parsing vulnerability that allows an out-of-bounds read, potentially enabling remote code execution. The flaw results from improper validation of user-supplied data in U3D parsing and can be triggered when a user opens a malicious file or visits a mal...

CVE-2024-8817

PDF-XChange Editor is affected by a U3D parsing vulnerability that causes an out-of-bounds write, enabling remote code execution. The flaw, arising from insufficient validation of U3D data during parsing, can write past the end of an allocated object and execute code in the attacker’s context. Ex...

CVE-2023-39497

PDF-XChange Editor is affected by a JPG File Parsing Out-of-Bounds Write Remote Code Execution vulnerability. The flaw stems from insufficient validation during JPG parsing, allowing a write past the end of an allocated object and enabling code execution in the context of the current process. Exp...

CVE-2024-27330

CVE-2024-27330 concerns PDF-XChange Editor where the EMF file parsing lacks validation, causing an out-of-bounds read. The issue can disclose sensitive information and, per sources, may enable arbitrary code execution when combined with other vulnerabilities. Exploitation requires user interactio...

CVE-2024-8819

CVE-2024-8819 affects PDF-XChange Editor. The vulnerability is an out-of-bounds read in the U3D file parsing path, caused by insufficient validation of user-supplied data, which can lead to information disclosure . Exploitation requires user interaction (visiting a malicious page or opening a mal...

CVE-2023-27340

PDF-XChange Editor is affected by a PNG file parsing out-of-bounds write vulnerability (CVE-2023-27340). The flaw occurs during PNG data parsing, where crafted PNG content can write past the end of an allocated buffer, enabling arbitrary code execution in the context of the attacker’s process. Ex...

CVE-2023-42061

CVE-2023-42061 affects PDF-XChange Editor. The issue is in the U3D file parser: inadequate validation causes an out-of-bounds read, enabling remote code execution. Exploitation requires user interaction (open a malicious file/page). The underlying root cause is reading past the end of an allocate...

CVE-2024-8825

PDF-XChange Editor is affected by a PDF parsing vulnerability that causes an out-of-bounds read, enabling remote code execution. The flaw arises from inadequate validation of PDF data, allowing an attacker to read past the end of an allocated buffer. Exploitation requires user interaction (target...

CVE-2023-39502

CVE-2023-39502 affects PDF-XChange Editor via an OXPS file parsing out-of-bounds write that allows remote code execution . The flaw stems from insufficient validation of user-supplied data, causing a write past the end of an allocated buffer. Exploitation requires user interaction (visiting a mal...

CVE-2023-42045

PDF-XChange Editor is affected by an Out-Of-Bounds Read in J2K file parsing that enables Remote Code Execution. The issue stems from inadequate validation while parsing J2K data, allowing reads past allocated objects and arbitrary code execution in the process context. Public disclosures (ZDI-23-...

CVE-2024-8844

CVE-2024-8844 affects PDF-XChange Editor. The vulnerability arises in PDF file parsing, due to improper validation of user-supplied data, causing an out-of-bounds read that can disclose sensitive information. The flaw can read past the end of an allocated object, and, per the description, an atta...

CVE-2024-27323

PDF-XChange Editor Updater suffers from improper certificate validation in its update functionality, enabling network-adjacent attackers to execute arbitrary code with the current user’s privileges without user interaction. Affected software: PDF-XChange Editor (Updater component). Root cause: se...

CVE-2024-8838

CVE-2024-8838 describes an out-of-bounds read in the XPS file parsing of PDF-XChange Editor that can enable remote code execution. The flaw arises from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer during XPS parsing. The vulnerability is trigge...

CVE-2023-39483

CVE-2023-39483 affects PDF-XChange Editor. The flaw lies in the J2K file parsing that can trigger a read past the end of an allocated buffer, causing information disclosure. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The description notes that ...

CVE-2023-42065

CVE-2023-42065 describes an out-of-bounds read vulnerability in PDF-XChange Editor related to JP2 file parsing. The flaw arises from insufficient validation of user-supplied data during JP2 parsing, which can cause a read past the end of an allocated object and may lead to information disclosure....

CVE-2024-27324

The CVE-2024-27324 entry concerns PDF-XChange Editor and its TIF file parsing. The flaw arises from insufficient validation in TIF data handling, enabling an out-of-bounds read that can disclose sensitive information. Impact is information disclosure; the description also notes potential for arbi...

CVE-2023-27343

CVE-2023-27343 affects PDF-XChange Editor. The vulnerability lies in EMF file parsing where crafted data can trigger a write past the end of an allocated buffer, allowing remote code execution with the attacker’s code running in the context of the current process. User interaction is required (vi...

CVE-2023-39485

PDF-XChange Editor is affected by CVE-2023-39485 due to a flaw in JP2 file parsing that can trigger an out-of-bounds write, enabling remote code execution in the context of the current process. Exploitation requires user interaction (the target must open a crafted JP2 or visit a malicious page). ...

CVE-2023-39493

CVE-2023-39493 affects PDF-XChange Editor. The vulnerability is in the exportAsText method, where a JavaScript interface exposes the ability to write arbitrary files, enabling remote code execution in the context of the current user. Exploitation requires user interaction (target user must visit ...

CVE-2023-42109

PDF-XChange Editor is affected by an EMF File Parsing Out-Of-Bounds Read Information Disclosure vulnerability (CVE-2023-42109). The flaw arises from insufficient validation during EMF file parsing, enabling a read past the end of an allocated object and disclosure of sensitive information. Exploi...

CVE-2023-42112

PDF-XChange Editor contains a vulnerability in the EMF file parser that allows an out-of-bounds read, leading to information disclosure. The flaw arises from insufficient validation of EMF data, enabling a remote attacker to cause a read past the end of an allocated object. Exploitation requires ...

CVE-2024-8820

PDF-XChange Editor is affected by a U3D file parsing out-of-bounds read vulnerability (CVE-2024-8820). The flaw stems from insufficient validation of user-supplied data in U3D parsing, potentially allowing information disclosure and, in conjunction with other issues, arbitrary code execution in t...

CVE-2024-8827

PDF-XChange Editor is affected by a CVE-2024-8827 vulnerability describing an out-of-bounds write during PPM file parsing that enables remote code execution. The flaw arises from insufficient validation of user-supplied data, allowing a write past the end of an allocated buffer in the PPM parsing...

CVE-2024-8828

PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVE-2024-8828): The flaw occurs in EMF file parsing due to inadequate validation, allowing a read past the end of an allocated object. This can lead to information disclosure and, in conjunction with othe...

CVE-2023-32160

The CVE-2023-32160 issue affects PDF-XChange Editor and stems from PDF parsing: crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution. It requires user interaction (open a malicious file or visit a malicious page). The vulnerability’s impact is descr...

CVE-2023-39488

CVE-2023-39488 : PDFs-XChange Editor is affected by a Use-After-Free condition in TIF file parsing that can lead to remote code execution. The flaw arises from not validating the existence of an object before operating on it, allowing an attacker to execute code with the current process context. ...

CVE-2023-42107

CVE-2023-42107 describes a vulnerability in PDF-XChange Editor where EMF file parsing can cause an out-of-bounds read, leading to information disclosure on affected installations. The issue stems from inadequate validation of user-supplied data during EMF parsing. Exploitation requires user inter...

CVE-2024-8815

PDF-XChange Editor is affected by CVE-2024-8815 due to a memory corruption in the U3D file parsing path. The flaw arises from insufficient validation of user-supplied data during U3D parsing, enabling arbitrary code execution when a user opens a malicious file or visits a crafted page. Exploitati...

CVE-2024-8833

CVE-2024-8833 concerns PDF-XChange Editor. The vulnerability stems from the XPS file parsing path where improper validation of user-supplied data can cause an out-of-bounds read, enabling arbitrary code execution in the context of the affected process. The issue is described as a read past the en...

CVE-2024-8849

Summary (CVE-2024-8849) PDF-XChange Editor is affected by an AcroForm handling flaw that allows an out‑of‑bounds read, leading to information disclosure. The issue arises from improper validation of user-supplied data within AcroForms, enabling a read past the end of an allocated object. Reported...

CVE-2023-27341

PDF-XChange Editor vulnerability CVE-2023-27341 stems from an out-of-bounds write during TIF file parsing. Crafting a TIF file allows an attacker to trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the process. Exploitation requires user interaction (targe...

CVE-2023-39484

CVE-2023-39484 affects PDF-XChange Editor. The vulnerability lies in PDF file parsing where memory is accessed without proper initialization, leading to information disclosure. Impact: potential exposure of sensitive data on affected installations. Exploitation requires user interaction (the targ...

CVE-2023-42049

CVE-2023-42049 (PDF-XChange Editor) is confirmed to involve an out-of-bounds read in the EMF file parser that allows information disclosure. Affected software is PDF-XChange Editor; the flaw arises from insufficient validation of EMF data, enabling a read past the end of an allocated object. Affe...

CVE-2023-42060

CVE-2023-42060 affects PDF-XChange Editor. The root cause is improper validation during U3D file parsing, leading to a read past the end of an allocated buffer and enabling remote code execution. Impact is arbitrary code execution with user interaction required (visiting a malicious page or openi...

CVE-2024-8832

CVE-2024-8832 describes a vulnerability in PDF-XChange Editor where the EMF file parsing logic fails to validate user-supplied data, causing an out-of-bounds read and potential information disclosure. The issue is triggered when a target opens a malicious EMF file or visits a page that references...

CVE-2023-27339

CVE-2023-27339 affects PDF-XChange Editor. The vulnerability stems from the PNG file parsing code, where crafted data can trigger an out-of-bounds write, enabling remote code execution in the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious...

CVE-2023-39498

CVE-2023-39498 affects PDF-XChange Editor. A flaw in parsing JPG files leads to an out-of-bounds write, allowing arbitrary code execution in the affected process. The vulnerability requires user interaction (visiting a malicious page or opening a malicious file). The issue is caused by inadequate...