An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.7.3.401. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 6.5 · pdf-xchangeNVD modified 2026-10-18 18:10
Affected (CPE criteria) 1
cpe:2.3:a:pdf-xchange:pdf-xchange_editor:10.7.3.401:*:*:*:*:*:*:*
References 2
- https://talosintelligence.com/vulnerability_reports/TALOS-2025-2280 Exploit, Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2280 Exploit, Third Party Advisory