CVE-2025-0910
Published: 11 February 2025
Summary
CVE-2025-0910 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Pdf-Xchange Pdf-Xchange Editor. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Malicious Link (T1204.001); ranked in the top 36.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Deeper analysis
PDF-XChange Editor contains an out-of-bounds write vulnerability in its handling of U3D files that is tracked as CVE-2025-0910. The flaw stems from insufficient validation of user-supplied data during file parsing, allowing a write past the end of an allocated buffer. Successful exploitation grants arbitrary code execution in the context of the current process and carries a CVSS 3.1 score of 8.8.
Remote attackers can trigger the issue by convincing a target to open a malicious PDF or visit a malicious page that embeds a crafted U3D file. No authentication is required, but user interaction is mandatory. The vulnerability was originally reported as ZDI-CAN-25748.
The associated Zero Day Initiative advisory at the listed reference URL provides further technical detail for affected installations. EPSS for the CVE rose from a low baseline to a peak of 0.0156 before receding to its current value of 0.0044, indicating a period of increased exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-1925
Vulnerability details
PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit…
more
a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25748.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Out-of-bounds write enables RCE via crafted U3D in malicious file or web page, directly mapping to user execution and drive-by vectors.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Flaw remediation directly mitigates the out-of-bounds write vulnerability by applying vendor patches to the U3D file parsing component in PDF-XChange Editor.
Memory protection safeguards such as DEP and ASLR prevent exploitation of the out-of-bounds write for remote code execution even if the software flaw remains unpatched.
Information input validation enforces bounds checking on U3D file data, addressing the lack of proper validation of user-supplied data during parsing.