Information Disclosure Vulnerability in Foxit PDF Reader

CVE-2025-9323

What is CVE-2025-9323?

This vulnerability in Foxit PDF Reader arises from improper validation of user-supplied data during the parsing of JP2 files. Maliciously crafted files can cause the application to read beyond allocated memory boundaries, potentially disclosing sensitive information. Exploiting this issue requires user interaction, as the target must open a malicious file or visit a compromised web page. Attackers may combine this flaw with other vulnerabilities to gain further access, emphasizing the critical importance of user caution and timely updates.

References