PT-2025-50622 · Foxit · Foxit Pdf Editor+1

Published 2025-12-11 · Updated 2025-12-11 · CVE-2025-55314

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit PDF and Editor versions prior to 13.2 Foxit PDF and Editor 2025 versions prior to 2025.2

Description A flaw exists in Foxit PDF and Editor where deleting pages in a PDF document using JavaScript can cause the application to fail to update its internal states correctly. This can lead to issues when managing annotations, as the application assumes the internal states are valid, potentially resulting in memory corruption and application crashes. Exploitation could allow an attacker to execute arbitrary code. The issue involves dereferencing invalid or released memory.

Recommendations Update Foxit PDF and Editor to version 13.2 or later. Update Foxit PDF and Editor 2025 to version 2025.2 or later.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-55314

Affected Products

Foxit Pdf Editor

Foxit Pdf/Editor 2025

References · 6

• https://osv.dev/vulnerability/CVE-2025-55314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55314 · Security Note
• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://twitter.com/CVEnew/status/1999144303558308250 · Twitter Post
• https://t.me/CVEtracker/39489 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1999234986835116391 · Twitter Post