Foxit PDF Reader and Foxit PDF Editor Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A heap-based buffer overflow vulnerability has been identified in Foxit PDF Reader and Foxit PDF Editor. This vulnerability arises in the PDF parsing component when the software processes specially crafted JBIG2 data. The issue is caused by an integer overflow in the calculation of the image buffer size, which could potentially allow a remote attacker to execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to a crash of the application and allow for arbitrary code execution.

Remediation

Users can update to Foxit PDF Reader 2025.3 or Foxit PDF Editor 2025.3/14.0.2/13.2.2. Instructions for updating or downloading the latest versions are available on the Foxit website.