PT-2025-50619 · Foxit · Foxit Pdf/Editor 2025+1

Christian Mainka + 3 · Published 2025-12-11 · Updated 2026-01-07 · CVE-2025-55311

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Foxit PDF and Editor versions prior to 13.2 Foxit PDF and Editor 2025 versions prior to 2025.2

Description A specially crafted PDF document can utilize JavaScript to modify annotation content and then remove the file’s modification status through JavaScript interfaces. This bypasses digital signature verification by concealing document changes, potentially misleading users about the document’s integrity and compromising the trust associated with signed PDFs.

Recommendations Update Foxit PDF and Editor to version 13.2 or later. Update Foxit PDF and Editor 2025 to version 2025.2 or later.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2025-55311

Affected Products

Foxit Pdf Editor

Foxit Pdf/Editor 2025

References · 6

• https://osv.dev/vulnerability/CVE-2025-55311 · Vendor Advisory
• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55311 · Security Note
• https://t.me/cveNotify/147937 · Telegram Post
• https://twitter.com/CVEnew/status/1999144300102242421 · Twitter Post
• https://t.me/CVEtracker/39486 · Telegram Post