Remote Code Execution Vulnerability in Foxit PDF Editor PolyLine Annotation

CVE-2021-34963

What is CVE-2021-34963?

A use-after-free vulnerability exists within Foxit PDF Editor that affects how the application handles Annotation objects. When an affected user interacts with a manipulated PDF file or visits a malicious webpage, it may lead to the execution of arbitrary code in the same context as the application. This flaw arises from the inadequate validation of an object's existence before performing operations, thereby allowing attackers to exploit the issue and execute code remotely. Affected installations are at risk unless patched.

References