CVE-2025-0901
Published: 11 February 2025
Summary
CVE-2025-0901 is a high-severity Out-of-bounds Read (CWE-125) vulnerability in Pdf-Xchange Pdf-Xchange Editor. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked in the top 39.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2025-0901 is an out-of-bounds read vulnerability in the handling of Doc objects within PDF-XChange Editor. The flaw stems from insufficient validation of user-supplied data, allowing a read past the end of an allocated buffer that can be leveraged for remote code execution in the context of the current process. It carries a CVSS 3.1 score of 8.8 and is also tracked as ZDI-CAN-25372.
Remote attackers can exploit the issue by convincing a target to visit a malicious page or open a malicious file, after which arbitrary code execution becomes possible without further privileges. The attack requires user interaction but needs no authentication or special access beyond delivering the crafted PDF content.
The associated EPSS score rose from a low baseline to a peak of 0.0137, indicating emerging exploitation interest after disclosure. Details are available in the Zero Day Initiative advisory at https://www.zerodayinitiative.com/advisories/ZDI-25-062/.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-1916
Vulnerability details
PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a…
more
malicious page or open a malicious file. The specific flaw exists within the handling of Doc objects. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25372.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Out-of-bounds read in PDF editor directly enables client-side RCE via malicious file or drive-by web page (T1203/T1204.002/T1189).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Requires timely patching and remediation of the specific out-of-bounds read flaw in PDF-XChange Editor's Doc object handling to eliminate the vulnerability.
Mandates validation of user-supplied data within Doc objects at application entry points, directly addressing the lack of proper validation causing the buffer over-read.
Enforces memory protections such as non-executable memory and address randomization to prevent remote code execution from the out-of-bounds read exploitation.