Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

CVE-2024-9255

Summary

Foxit PDF Reader contains a vulnerability related to the handling of Annotation objects, where a use-after-free issue can be exploited by attackers. This flaw allows for arbitrary code execution on devices running affected versions of the software. Attackers can utilize this vulnerability by persuading users to open malicious files or visit harmful web pages, leading to potential unauthorized actions within the context of the running process. The security concern emphasizes the significance of proper object validation to prevent exploitation.

References