PT-2025-50620 · Foxit · Foxit Pdf/Editor 2025+1

Published 2025-08-13 · Updated 2025-12-11 · CVE-2025-55312

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit PDF and Editor versions prior to 13.2 Foxit PDF and Editor 2025 versions prior to 2025.2

Description A flaw exists in Foxit PDF and Editor where deleting pages in a PDF document using JavaScript can cause the application to incorrectly update its internal states. This can lead to issues when managing annotations, as the application assumes the internal states are valid, potentially resulting in memory corruption and application crashes. In certain scenarios, this could allow an attacker to execute arbitrary code. The issue involves dereferencing invalid or released memory.

Recommendations Update Foxit PDF and Editor to version 13.2 or later. Update Foxit PDF and Editor 2025 to version 2025.2 or later.

Fix

Out of bounds Read

NULL Pointer Dereference

Weakness Enumeration

CWE-125

CWE-476

Related Identifiers

BDU:2025-15882

CVE-2025-55312

Affected Products

Foxit Pdf Editor

Foxit Pdf/Editor 2025

References · 7

• https://osv.dev/vulnerability/CVE-2025-55312 · Vendor Advisory
• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55312 · Security Note
• https://bdu.fstec.ru/vul/2025-15882 · Security Note
• https://twitter.com/CVEnew/status/1999144301125656880 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1999224747343630717 · Twitter Post
• https://t.me/CVEtracker/39487 · Telegram Post