Foxit Products Use-After-Free Vulnerability Leading to Potential Arbitrary Code Execution

A use-after-free vulnerability has been identified in multiple Foxit products, including Foxit PDF Reader and Foxit PDF Editor, all on Windows. This vulnerability arises when the application mishandles certain document elements, such as XFA files or annotation objects, allowing access to invalidated objects. Exploitation of this flaw could result in program crashes and, in some cases, unauthorized code execution.

Impact

Exploitation of this vulnerability could cause the application to crash and potentially allow for the execution of arbitrary code.

Remediation

Users can update to the latest versions of Foxit PDF Reader or Foxit PDF Editor. Instructions for updating are available on the Foxit website.