Memory Corruption Vulnerability in Foxit PDF and Editor for Windows and macOS
CVE-2025-55314

7.8HIGH

Key Information:

Vendor

Foxit Software

Status
Foxit PDF and Editor
Vendor
CVE Published:
11 December 2025

What is CVE-2025-55314?

A critical issue has been identified in Foxit PDF and Editor for Windows and macOS, where improper handling of page deletions via JavaScript can result in memory corruption. This occurs when the application fails to update its internal states, leading to faulty assumptions regarding the validity of memory operations. Such vulnerabilities could enable an attacker to exploit these inconsistencies, potentially leading to application crashes or the execution of arbitrary code.

References

https://www.foxit.com/support/security-bulletins.html

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-55314 : Memory Corruption Vulnerability in Foxit PDF and Editor for Windows and macOS