VULNERABILITY INTELLIGENCE

CVE-2025-64086

CVSS score7.5 HIGH

EPSS probability0.30%

CISA KEVNot currently listed

Published2025-12-09

Last modified2026-06-17

Description

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service (DoS) via a crafted input.