CVE-2025-64086

No fix known EPSS <1%CVSS 6.5

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Published 2025-12-09 · CVE record · OSV

Products: pdf-xchange_editor