EUVD-2026-25827CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionNVD
Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction.
AnalysisAI
Memory corruption in Foxit PDF Reader and Foxit PDF Editor allows local attackers to crash the application or potentially execute arbitrary code through specially crafted PDF files with malformed form field hierarchies. The vulnerability triggers when parsing logic misidentifies non-signature data as valid signatures, causing invalid memory writes during internal data structure construction. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and inventory all Foxit PDF Reader and Foxit PDF Editor installations across the organization using endpoint detection tools; communicate to users not to open PDFs from untrusted sources pending remediation. Within 7 days: Deploy application sandboxing or process isolation policies for Foxit applications; configure file type restrictions on email gateways to block suspicious PDF attachments; implement user security awareness training focused on malicious document risks. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today