pdf-xchange pro vulnerabilities and fixes

Recent CVEs affecting pdf-xchange pro, with upgrade or downgrade steps. 4 tracked.

Also searched as: pdf xchange pro, pdf-xchangepro.

pdf-xchange pro has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-06-25. Highest priority: CVE-2025-6660 (score 33/100).

• CVE-2025-6660 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
• CVE-2025-6659 HIGH 7.8 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2025-6658 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2025-0900 LOW 3.3 DOWNGRADE DOWNGRADE PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

FAQ

How do I fix pdf-xchange pro vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is pdf-xchange pro being exploited right now?

None of the tracked pdf-xchange pro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which pdf-xchange pro CVE should I patch first?

CVE-2025-6660 currently ranks highest (33/100): PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

RSS feed for pdf-xchange pro · ← Back to latest CVEs