CVE-2025-14409

Name of the Vulnerable Software and Affected Versions Soda PDF Desktop (affected versions not specified)

Description A flaw exists in the parsing of PDF files within Soda PDF Desktop, resulting from insufficient validation of user-supplied data. This can lead to a write past the end of an allocated buffer, potentially allowing a remote attacker to execute code in the context of the current process. User interaction is required, such as visiting a malicious page or opening a malicious file, to trigger the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.