Signature Spoofing in Foxit PDF Editor and Reader

CVE-2025-59802

What is CVE-2025-59802?

Foxit PDF Editor and Reader versions prior to 2025.2.1 are vulnerable to a signature spoofing flaw that exploits Optional Content Groups (OCG). This vulnerability allows malicious actors to change the visibility of OCG content in a signed PDF document after it has been signed without invalidating the digital signature. As a result, the content displayed to the user can differ from what was originally signed, which severely undermines the integrity and trust of the digital signature. Users are encouraged to update to fixed versions to mitigate this risk.

References