Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc(). During execution, an internal XID object is allocated and then freed prematurely, after which the freed pointer is still passed into UI and logging helper functions. Because the freed memory region may contain unpredictable heap data or remnants of attacker-controlled JavaScript strings, downstream routines such as wcscmp() may process invalid or stale pointers. This can result in access violations and non-deterministic crashes.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2025-69627 Heap Use-After-Free Vulnerability in Nitro PDF Pro 14.41.1.4 mailDoc() Method https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-69627
Post summary
The text announces a heap use‑after‑free vulnerability (CVE‑2025‑69627) in Nitro PDF Pro without providing PoC, exploit, active use, patch, or false positive information.
CVE-2025-69627 Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc(). During execution, an i… https://www.cve.org/CVERecord?id=CVE-2025-69627
Post summary
The text announces a new use‑after‑free flaw in Nitro PDF Pro’s JavaScript mailDoc() method, providing technical details but no PoC, exploit, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gonitro | nitro_pdf_pro | 14.41.1.4 | - | - |
| OS | microsoft | windows | - | - | - |