Information Disclosure Vulnerability in Foxit PDF Reader

CVE-2025-9324

What is CVE-2025-9324?

An information disclosure vulnerability exists within Foxit PDF Reader due to improper parsing of PRC files, which may allow an attacker to disclose sensitive information. Successful exploitation requires user interaction, such as visiting a malicious website or opening a harmful file. The flaw results from insufficient validation of user-supplied data, leading to potential read operations beyond allocated memory spaces. Attackers may exploit this vulnerability alongside other issues to execute arbitrary code within the affected process.

References