Foxit PDF Editor and Reader Signature Spoofing Vulnerability

A signature spoofing vulnerability has been identified in Foxit PDF Editor and Reader versions prior to 2025.2.1. This vulnerability allows an attacker to embed triggers, such as JavaScript, into a PDF document. These triggers execute during the signing process, altering content on other pages or optional content layers without warning. As a result, the signed PDF may not match what the signer initially reviewed, compromising the integrity of the digital signature.

Impact

Exploitation of this vulnerability leads to a signature-based trust bypass, allowing manipulated documents to be signed without the signer's awareness of the changes.

Remediation

Users can update to Foxit PDF Editor or Reader versions 2025.2.1, 14.0.1, or 13.2.1. Instructions for updating or downloading the latest versions are available on the Foxit website.