What is the CVSS score of CVE-2025-6642?

CVE-2025-6642 has a CVSS 3.0 base score of 7.8 (High). CVSS vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Pdf Tools are affected by CVE-2025-6642?

CVE-2025-6642 is a high-severity remote code execution vulnerability in PDF-XChange Editor that allows attackers to execute arbitrary code when users open malicious PDF files containing U3D objects.

How to fix or mitigate CVE-2025-6642?

Within 24 hours: Inventory all installations of PDF-XChange Editor across the organization and communicate risk to affected business units; disable U3D file parsing in PDF-XChange Editor if the feature is non-critical to operations. Within 7 days: Issue security advisory instructing users to avoid opening PDF files from untrusted sources and to request IT review for external PDF documents; implement email gateway rules to flag or block emails with embedded U3D objects (u3d, prc file extensions). Within 30 days: Monitor vendor communications for patch availability and prepare deployment procedures; consider evaluating alternative PDF editors that do not support U3D or have demonstrated security postures.

Pdf Tools CVE-2025-6642

EUVD-2025-19144 HIGH

Out-of-bounds Read (CWE-125)

2025-06-25 zdi-disclosures@trendmicro.com

RCE Buffer Overflow Pdf Tools Pdf Xchange Editor

7.8

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 23:19 euvd

EUVD-2025-19144

Analysis Generated

Mar 15, 2026 - 23:19 vuln.today

CVE Published

Jun 25, 2025 - 22:15 nvd

HIGH 7.8

DescriptionCVE.org

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of U3D files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26530.

AnalysisAI

CVE-2025-6642 is a critical out-of-bounds read vulnerability in PDF-XChange Editor's U3D file parser that allows remote code execution with user interaction. The vulnerability affects PDF-XChange Editor across multiple versions and stems from improper validation of U3D file data structures, enabling attackers to read beyond allocated memory boundaries and execute arbitrary code in the application's context. While this vulnerability currently shows a CVSS 7.8 score indicating high severity, real-world exploitation requires user interaction (opening a malicious PDF or visiting a malicious page), moderating immediate organizational risk.

Technical ContextAI

The vulnerability resides in PDF-XChange Editor's Universal 3D (U3D) file format parsing functionality. U3D is a 3D model format commonly embedded within PDF documents. The specific flaw involves insufficient boundary validation when parsing U3D stream objects and their associated data structures, classified under CWE-125 (Out-of-bounds Read). When processing a specially crafted U3D file, the parser fails to validate that read operations remain within allocated buffer boundaries, allowing an attacker to read adjacent memory regions. This out-of-bounds read can disclose sensitive data and be leveraged through information leakage to facilitate code execution via memory corruption techniques. The vulnerability was originally identified as ZDI-CAN-26530 through Trend Micro's Zero Day Initiative program.

RemediationAI

Remediation steps should follow this prioritization: (1) Immediate: Update PDF-XChange Editor to the patched version released by Tracker Software (consult vendor advisory for specific version numbers). (2) Interim Mitigations (pending patch deployment): Implement file type restrictions to prevent opening U3D-embedded PDFs from untrusted sources; disable U3D rendering in PDF-XChange Editor settings if such an option exists; educate users not to open PDF files from untrusted or unexpected sources; implement application whitelisting to restrict PDF-XChange Editor execution contexts. (3) Detection: Monitor for suspicious PDF-XChange Editor process behavior (out-of-memory errors, unexpected child processes, unusual memory access patterns) using endpoint detection and response (EDR) tools. (4) For air-gapped or legacy environments unable to patch immediately: consider sandboxing PDF-XChange Editor execution or using alternative PDF readers for untrusted documents. Consult Tracker Software's official security advisories at their website (tracker-software.com/security) for definitive patch availability and version information.