PT-2025-50615 · Foxit · Foxit Pdf/Editor 2025+1

Published 2025-12-11 · Updated 2026-01-06 · CVE-2025-55307

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foxit PDF and Editor versions prior to 13.2 Foxit PDF and Editor 2025 versions prior to 2025.2

Description An issue exists in Foxit PDF and Editor that may lead to information disclosure or memory corruption. This can occur when opening a malicious PDF file containing a crafted JavaScript call to the search.query() function. The issue is triggered by a crafted cDIPath parameter (for example, "/") which causes an out-of-bounds read in the internal path-parsing logic.

Recommendations Update Foxit PDF and Editor to version 13.2 or later. Update Foxit PDF and Editor 2025 to version 2025.2 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-55307

Affected Products

Foxit Pdf Editor

Foxit Pdf/Editor 2025

References · 7

• https://osv.dev/vulnerability/CVE-2025-55307 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55307 · Security Note
• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://t.me/cveNotify/147828 · Telegram Post
• https://t.me/CVEtracker/39482 · Telegram Post
• https://twitter.com/CVEnew/status/1999144295857565998 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1999227307173572942 · Twitter Post