Read the docs

Soda PDF

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Soda PDF records in CISA KEV

No Soda PDF vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

11 records

TI-2025-13164 CVE-2025-14413 · GHSA-jqjw-9qg4-xvq2

Path traversal in Soda PDF Desktop

Priority LOW 36

Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00449 Published 2025-12-23 No fix listed CWE-22
TI-2025-13160 CVE-2025-14409 · GHSA-cvm4-ppm7-px2p

Out-of-bounds write in Soda PDF Desktop

Priority LOW 35

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00187 Published 2025-12-23 No fix listed CWE-787
TI-2025-13157 CVE-2025-14406 · GHSA-78w4-pwpr-qchm

Uncontrolled search path in Soda PDF Desktop

Priority LOW 35

Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00164 Published 2025-12-23 No fix listed CWE-427
TI-2025-13162 CVE-2025-14411 · GHSA-xfmc-rrpg-g7c7

Out-of-bounds read in Soda PDF Desktop

Priority LOW 24

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00178 Published 2025-12-23 No fix listed CWE-125
TI-2025-13161 CVE-2025-14410 · GHSA-ghp5-jhjg-chxj

Out-of-bounds read in Soda PDF Desktop

Priority LOW 24

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00178 Published 2025-12-23 No fix listed CWE-125
TI-2025-13158 CVE-2025-14407 · GHSA-hfqq-h99r-jj95

Memory corruption in Soda PDF Desktop

Priority LOW 24

Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00179 Published 2025-12-23 No fix listed CWE-119
TI-2025-13159 CVE-2025-14408 · GHSA-ppqv-vwjw-2qx4

Out-of-bounds read in Soda PDF Desktop

Priority LOW 15

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.

CVSS 3.0LOW 3.3 Local No auth User interaction EPSS 0.0017 Published 2025-12-23 No fix listed CWE-125
Open these records in search →