CVE-2025-55314

Name of the Vulnerable Software and Affected Versions Foxit PDF and Editor versions prior to 13.2 Foxit PDF and Editor 2025 versions prior to 2025.2

Description A flaw exists in Foxit PDF and Editor where deleting pages in a PDF document using JavaScript can cause the application to fail to update its internal states correctly. This can lead to issues when managing annotations, as the application assumes the internal states are valid, potentially resulting in memory corruption and application crashes. Exploitation could allow an attacker to execute arbitrary code. The issue involves dereferencing invalid or released memory.

Recommendations Update Foxit PDF and Editor to version 13.2 or later. Update Foxit PDF and Editor 2025 to version 2025.2 or later.