CVE-2025-66499

🗓️ 19 Dec 2025 07:11:50Reported by FoxitType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 7 Views

CVE-2025-66499: Foxit PDF Reader JBIG2 parsing heap overflow may overflow image size and enable remote code execution.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2025-66499	19 Dec 202505:00	–	circl
CNNVD	Foxit PDF Reader 安全漏洞	19 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-66499 Foxit PDF Reader PDF Parsing Heap-Based Buffer Overflow Remote Code Execution Vulnerability	19 Dec 202507:11	–	cvelist
EUVD	EUVD-2025-204461	19 Dec 202507:11	–	euvd
Kaspersky	KLA90828 Multiple vulnerabilities in Foxit Reader	19 Dec 202500:00	–	kaspersky
Tenable Nessus	Foxit PDF Editor for Mac < 13.2.2 / 14.0.2 / 2025.3 Multiple Vulnerabilities	19 Dec 202500:00	–	nessus
Tenable Nessus	Foxit PDF Reader for Mac < 2025.3 Multiple Vulnerabilities	19 Dec 202500:00	–	nessus
NCSC	Vulnerabilities fixed in Foxit PDF Reader	24 Dec 202509:14	–	ncsc
NVD	CVE-2025-66499	19 Dec 202507:16	–	nvd
OpenVAS	Foxit Reader Multiple Vulnerabilities (Dec 2025) - Windows	23 Dec 202500:00	–	openvas

NVD

Node

foxit pdf_editorRange≤13.2.1.23955

foxit pdf_editorRange14.0.0.33046–14.0.1.33197

foxit pdf_editorRange2023.1.0.15510–2023.3.0.23028

foxit pdf_editorRange2024.1.0.23997–2024.4.1.27687

foxit pdf_editorRange2025.1.0.27937–2025.2.1.33197

foxit pdf_readerRange≤2025.2.1.33197

AND

microsoft windowsMatch-

Node

foxit pdf_editorRange≤13.2.1.63315

foxit pdf_editorRange14.0.0.33046–14.0.1.69005

foxit pdf_editorRange2023.1.0.15510–2023.3.0.63083

foxit pdf_editorRange2024.1.0.23997–2024.4.1.66479

foxit pdf_editorRange2025.1.0.27937–2025.2.1.69005

foxit pdf_readerRange≤2025.2.1.69005

AND

apple macosMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS"
    ],
    "product": "Foxit PDF Reader",
    "vendor": "Foxit Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2025.2.1 and earlier"
      },
      {
        "status": "affected",
        "version": "Versions 14.0.1 and earlier"
      },
      {
        "status": "affected",
        "version": "Versions 13.2.1 and eariler"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS"
    ],
    "product": "Foxit PDF Editor",
    "vendor": "Foxit Software Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 2025.2.1 and earlier"
      },
      {
        "status": "affected",
        "version": "Versions 14.0.1 and earlier"
      },
      {
        "status": "affected",
        "version": "Versions 13.2.1 and eariler"
      }
    ]
  }
]

Source	Link
foxit	www.foxit.com/support/security-bulletins.html

23 Dec 2025 17:37Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8

EPSS0.00047

SSVC

CWE-190