High · published December 11, 2025
⚡ A sneaky flaw in Foxit PDF Editor can lead to arbitrary code execution just by deleting pages with JavaScript—yikes! 🔥 This issue is like a house of cards: remove one card, and the whole structure can come crashing down if the support isn’t properly adjusted. It’s a precarious balance, and a small tweak can lead to chaotic memory corruption! An attacker can exploit this flaw to crash the application or, even worse, execute arbitrary code on the user's system. Imagine your PDF reader suddenly turning rogue and giving the keys of your system to an unwanted guest! 😱 This could lead to unauthorized access and manipulation of sensitive data.
This issue is like a house of cards: remove one card, and the whole structure can come crashing down if the support isn’t properly adjusted. It’s a precarious balance, and a small tweak can lead to chaotic memory corruption! When pages in a PDF are deleted via JavaScript, Foxit PDF and Editor fail to update internal states correctly. This oversight can lead to dereferencing invalid memory, resulting in memory corruption and crashes, which can then be exploited to run arbitrary code.
An attacker can exploit this flaw to crash the application or, even worse, execute arbitrary code on the user's system. Imagine your PDF reader suddenly turning rogue and giving the keys of your system to an unwanted guest! 😱 This could lead to unauthorized access and manipulation of sensitive data. Update Foxit PDF and Editor to version 13.2 or 2025.2 to patch this vulnerability. Regularly review your applications for updates and enable security features to prevent exploitation. Don’t let your guard down! You’ve got this! Follow these steps, and you’ll keep your PDF handling safe and sound. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| foxit/pdf_editor | ≤ 13.1.7.63027 | — |
| foxit/pdf_editor | ≥ 2023.1.0.55583, ≤ 2023.3.0.63083 | — |
| foxit/pdf_editor | ≥ 2024.1.0.63682, ≤ 2024.4.1.66479 | — |
| foxit/pdf_editor | all versions | — |
| foxit/pdf_reader | ≤ 2025.1.0.66692 | — |
| foxit/pdf_editor | ≥ 2023.1.0.15510, ≤ 2023.3.0.23028 | — |
| foxit/pdf_editor | ≥ 2024.1.0.23997, ≤ 2024.4.1.27687 | — |
| foxit/pdf_editor | all versions | — |
| foxit/pdf_reader | ≤ 2025.1.0.27937 | — |