Foxit PDF Reader and Foxit PDF Editor Memory Corruption Vulnerability in 3D Annotation Handling

A memory corruption vulnerability has been identified in Foxit PDF Reader and Foxit PDF Editor. This issue arises from inadequate bounds checking when processing PRC data in 3D annotations. Opening a PDF file that contains malformed or specially crafted PRC content can lead to out-of-bounds memory access, causing memory corruption.

Impact

Exploitation of this vulnerability can result in memory corruption, which may be leveraged to execute arbitrary code.

Remediation

Users can update to the latest versions of Foxit PDF Reader or Foxit PDF Editor. For Foxit PDF Reader, the updated version can be downloaded from the Foxit website or via the application's update feature. For Foxit PDF Editor, the latest version is also available on the Foxit website or through the application's update option.