CVE-2025-64086: Null Pointer Dereference
Published Dec 9, 2025
·Updated
A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service (DoS) via a crafted input.
Affected Software
2 affected components
Tracker Software PDF-XChange Editor
PDF-XChange PDF-XChange Editor=10.7.3.401
Event History
Dec 9, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-64086?
CVE-2025-64086 is classified as a Denial of Service (DoS) vulnerability.
2
How do I fix CVE-2025-64086?
To fix CVE-2025-64086, upgrade to the latest version of PDF-XChange Editor that addresses this vulnerability.
3
What is the impact of CVE-2025-64086 on PDF-XChange Editor?
The impact of CVE-2025-64086 on PDF-XChange Editor is that it allows attackers to cause a Denial of Service through a crafted input.
4
Which version of PDF-XChange Editor is affected by CVE-2025-64086?
CVE-2025-64086 specifically affects Tracker Software PDF-XChange Editor version 10.7.3.401.
5
Can CVE-2025-64086 be exploited remotely?
Yes, CVE-2025-64086 can be exploited remotely by sending specially crafted input to the application.