CVE-2025-2231
Published: 24 March 2025
Summary
CVE-2025-2231 is a high-severity Out-of-bounds Read (CWE-125) vulnerability in Pdf-Xchange Pdf-Tools. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 27.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2025-2231 is an out-of-bounds read vulnerability in the RTF file parsing component of PDF-XChange Editor. The flaw stems from insufficient validation of user-supplied data, allowing a read past the end of an allocated buffer. Successful exploitation grants remote code execution in the context of the current process, and the issue was originally reported as ZDI-CAN-25473 with a CVSS 3.0 score of 7.8.
Remote attackers can trigger the vulnerability by supplying a malicious RTF file or web page that the victim must open or visit. No authentication or elevated privileges are required beyond normal user interaction, enabling arbitrary code execution on affected installations.
Vendor and Zero Day Initiative advisories are available at the referenced URLs and address remediation steps for the affected PDF-XChange Editor versions. The associated EPSS score rose from a low baseline to a peak of 0.0212 before receding to its current value of 0.0068, indicating a temporary increase in observed exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-8025
Vulnerability details
PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit…
more
a malicious page or open a malicious file. The specific flaw exists within the parsing of RTF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25473.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.