CVE-2025-58113
mediumpriority · track · 0EPSS 0.005 · 44 %ileDEEUUSEPSS · scored 2026-10-28
An out-of-bounds read vulnerability exists in the EMF functionality of PDF-XChange Co. Ltd PDF-XChange Editor 10.7.3.401. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
- pdf-xchange pdf-xchange editor= 10.7.3.401nvdUScpe:2.3:a:pdf-xchange:pdf-xchange_editor:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-0251PDF-XChange PDF-XChange PRO: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2026-01-28csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PDF-XChange PDF-XChange PRO ausnutzen, um Informationen offenzulegen.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2025-58113cnnvd
- https://talosintelligence.com/vulnerability_reports/TALOS-2025-2280cnnvd
- https://www.pdf-xchange.com/product/downloadsPatchcnnvd
- https://talosintelligence.com/vulnerability_reports/TALOS-2025-2280enisa_euvd
- https://talosintelligence.com/vulnerability_reports/TALOS-2025-2280ExploitThird Party Advisorynvd
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2280ExploitThird Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan