Signature Spoofing Vulnerability in Foxit PDF Editor and Reader

CVE-2025-59803

What is CVE-2025-59803?

Foxit PDF Editor and Reader prior to version 2025.2.1 are susceptible to a signature spoofing vulnerability. This allows an attacker to embed malicious triggers, such as JavaScript, in a PDF document. During the signing process, these embedded triggers can execute without the user's knowledge, leading to modifications in other pages or optional content layers of the document. As a result, the signed PDF may present different content than what was initially viewed by the signer, significantly compromising the integrity and trust in the digital signature.

References