PT-2025-50617 · Foxit · Foxit Pdf/Editor 2025+1

Published 2025-12-11 · Updated 2026-01-06 · CVE-2025-55309

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit PDF and Editor versions prior to 13.2 Foxit PDF and Editor 2025 versions prior to 2025.2

Description A specially crafted PDF file containing JavaScript can trigger a use-after-free condition. This occurs when the JavaScript code attaches an OnBlur action to a form field, which then destroys an annotation. The program’s focus change handling prematurely releases the annotation object during a user’s right-click interaction, leading to memory corruption or application crashes. The vulnerability is related to the handling of annotations and focus changes within the application.

Recommendations Update Foxit PDF and Editor to version 13.2 or later. Update Foxit PDF and Editor 2025 to version 2025.2 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2025-55309

Affected Products

Foxit Pdf Editor

Foxit Pdf/Editor 2025

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-55309 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55309 · Vendor Advisory
• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1999240105555349804 · Twitter Post
• https://t.me/cveNotify/147830 · Telegram Post
• https://t.me/CVEtracker/39484 · Telegram Post
• https://twitter.com/CVEnew/status/1999144298076398054 · Twitter Post