CVE-2023-24308 Memory corruption in n/a

What is CVE-2023-24308?

CVE-2023-24308 is a high-severity memory corruption vulnerability in Pdf-Xchange Pdf-Xchange Editor, published on 28 Mar 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker Software may allow attackers to execute code when a user opens a crafted PDF file. The issue occurs when handling a large number of objects in a PDF file.

Weakness: CWE-755

Which versions are affected by CVE-2023-24308?

It affects 1 product.

Products include Pdf-Xchange Pdf-Xchange Editor.

How do I fix CVE-2023-24308?

No fix has been published for CVE-2023-24308 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2023-24308 being exploited?

There is no known exploitation of CVE-2023-24308 in the wild and no public exploit code.

Other vulnerabilities in Pdf-Xchange Pdf-Xchange Editor

• CVE-2025-0899 PDF-XChange Editor AcroForm Use-After-Free Remote Code Execution Vulnerability High 7.8
• CVE-2025-0901 PDF-XChange Editor Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability High 7.8
• CVE-2025-0903 PDF-XChange Editor RTF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability High 7.8
• CVE-2025-0910 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability High 7.8
• CVE-2024-7352 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability High 7.8

All Pdf-Xchange Pdf-Xchange Editor vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xm9j-54hw-p785.