EUVD-2026-25829CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionNVD
Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modifications, object reference validity was not properly maintained, leading to a crash when accessing an invalid pointer during page information queries.
AnalysisAI
Use-after-free in Foxit PDF Reader and Foxit PDF Editor allows local attackers to execute arbitrary code or crash the application via specially crafted PDF documents. When scripts modify document structures, the software fails to maintain valid object references during page information queries, enabling pointer dereference of freed memory. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify and inventory all Foxit PDF Reader and Foxit PDF Editor deployments across the organization; notify users to avoid opening PDF files from untrusted sources. Within 7 days: Implement application whitelisting to restrict execution of Foxit processes, or disable Foxit scripting features via configuration if available; evaluate alternative PDF readers without this vulnerability. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today