pdf-tools vulnerabilities and fixes

Recent CVEs affecting pdf-tools, with upgrade or downgrade steps. 63 tracked.

Also searched as: pdf tools.

pdf-tools has 63 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-06-25. Highest priority: CVE-2024-8842 (score 35/100).

• CVE-2025-6662 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6661 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability
• CVE-2025-6660 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
• CVE-2025-6659 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2025-6658 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6657 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6656 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6655 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6654 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2025-6653 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6652 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6651 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2025-6650 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6649 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6648 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6647 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2025-6646 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability
• CVE-2025-6645 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2025-6644 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2025-6643 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6642 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2025-6641 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-6640 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2025-2231 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor RTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2025-0900 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8849 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8848 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8847 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-8846 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8845 MEDIUM 5.5 UPGRADE UPGRADE PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8844 MEDIUM 5.5 UPGRADE UPGRADE PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8843 MEDIUM 5.5 UPGRADE UPGRADE PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8842 HIGH 7.8 UPGRADE UPGRADE PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability
• CVE-2024-8841 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8840 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-8839 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8838 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-8837 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-8836 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8835 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8834 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8833 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-8832 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8831 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-8830 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor XPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2024-8829 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8828 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8827 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2024-8826 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-8825 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-8824 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8823 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor JB2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8822 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8821 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability
• CVE-2024-8820 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8819 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2024-8818 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability
• CVE-2024-8817 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2024-8816 MEDIUM 5.5 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability
• CVE-2024-8815 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Memory Corruption Remote Code Execution Vulnerability
• CVE-2024-8814 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
• CVE-2024-8813 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2024-8812 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

FAQ

How do I fix pdf-tools vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is pdf-tools being exploited right now?

None of the tracked pdf-tools CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which pdf-tools CVE should I patch first?

CVE-2024-8842 currently ranks highest (35/100): PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability.

RSS feed for pdf-tools · ← Back to latest CVEs