Vulnerabilities fixed in Foxit Reader

🗓️ 25 Aug 2025 11:26:17Reported by NCSCType

Foxit Reader fixed vulnerabilities 2025.1.0.27937 that could trigger code execution via PDFs.

Reporter	Title	Published	Views	Family All 196
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the reading of data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.	3 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the way they handle reading data beyond the buffer in memory. This allows an attacker to execute arbitrary code.	3 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the way they handle reading data beyond the buffer in memory. This allows an attacker to execute arbitrary code.	3 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the reading of data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.	3 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) is related to an uncontrolled search path element, which allows a malicious user to escalate their privileges and execute arbitrary code with SYSTEM rights.	3 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the way they handle reading data beyond the buffer in memory. This allows an attacker to execute arbitrary code.	3 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the reading of data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.	3 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the reading of data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.	3 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) relates to access to an uninitialized pointer, allowing a malicious actor to execute arbitrary code or damage memory.	12 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) software lies in pointer assignment errors, allowing an attacker to execute arbitrary JavaScript code.	15 Dec 202500:00	–	bdu_fstec

Vulners

Node

foxit pdf_editorRange<14.013.2

foxit pdf_editorRange<2025.2

foxit pdf_readerRange<2025.2

Source	Link
foxit	www.foxit.com/support/security-bulletins.html

25 Aug 2025 11:26Current

7.8High risk

Vulners AI Score7.8

CVSS 47.3

CVSS 3.15.5 - 8.8

CVSS 37.8

EPSS0.00544

SSVC