Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

CVE-2024-9254

Summary

A vulnerability has been identified within Foxit PDF Reader related to the management of Annotation objects. This flaw, which allows for a use-after-free condition, can be exploited by remote attackers to execute arbitrary code on affected systems. To exploit this vulnerability, user interaction is required; victims must either navigate to a malicious webpage or open a specially crafted file. Failure to validate the existence of Annotation objects before performing operations can lead to severe security implications, enabling attackers to execute code within the context of the application, thereby compromising the integrity of the system.

References