High · published December 11, 2025
⚡ A crafted PDF could unleash chaos! A seemingly harmless file, when opened, might just execute arbitrary code on your computer! Think of it like a restaurant serving a dish that looks delicious, but the chef forgot to check the ingredients—one bad item could spoil the entire meal! In this case, a malicious PDF can corrupt memory and serve up something nasty instead of what you expect. If a user opens this tainted PDF, an attacker could gain full control of their system. That's right, they might be able to install malware, steal sensitive data, or wreak havoc—this is definitely not a dinner party you want to attend!
Think of it like a restaurant serving a dish that looks delicious, but the chef forgot to check the ingredients—one bad item could spoil the entire meal! In this case, a malicious PDF can corrupt memory and serve up something nasty instead of what you expect. This vulnerability arises from inadequate handling of memory allocation failures when a user sets an extremely large value for the charLimit property in a PDF form field via JavaScript. This oversight can lead to memory corruption and arbitrary code execution.
If a user opens this tainted PDF, an attacker could gain full control of their system. That's right, they might be able to install malware, steal sensitive data, or wreak havoc—this is definitely not a dinner party you want to attend! Immediate action? Upgrade to Foxit PDF and Editor version 13.2 or 2025.2 to patch this vulnerability. Additionally, educate your users about the risks of opening unknown PDF files, and consider implementing security measures that limit the execution of potentially harmful scripts. You've got this! By following these steps, you’ll strengthen your defenses and keep your systems safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| foxit/pdf_editor | ≥ 2023.1.0.15510, ≤ 2023.3.0.23028 | — |
| foxit/pdf_editor | ≥ 2024.1.0.23997, ≤ 2024.4.1.27687 | — |
| foxit/pdf_editor | all versions | — |
| foxit/pdf_reader | ≤ 2025.1.0.27937 | — |
| foxit/pdf_editor | ≤ 13.1.7.63027 | — |
| foxit/pdf_editor | ≥ 2023.1.0.55583, ≤ 2023.3.0.63083 | — |
| foxit/pdf_editor | ≥ 2024.1.0.63682, ≤ 2024.4.1.66479 | — |
| foxit/pdf_editor | all versions | — |
| foxit/pdf_reader | ≤ 2025.1.0.66692 | — |