Description
Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Foxit Software | Foxit PDF Editor | Versions 2026.2 and earlier, Versions 14.0.7 and earlier, Versions 13.2.6 and earlier | — |
| Foxit Software | Foxit PDF Reader | Versions 2026.2 and earlier | — |
Advisories 1
- WID-SEC-2026-3525 Foxit PDF Reader und Foxit PDF Editor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 23, 2026