7.8
CVE-2025-66497
- EPSS 0.18%
- Veröffentlicht 19.12.2025 07:16:02
- Zuletzt bearbeitet 23.12.2025 17:37:12
- Quelle 14984358-7092-470d-8f34-ade47a
- CVE-Watchlists
- Unerledigt
Foxit PDF Reader 3D Annotation Out-of-Bounds Memory Access Vulnerability
A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When opening a PDF file containing malformed or specially crafted PRC content, out-of-bounds memory access may occur, resulting in memory corruption.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Foxit ≫ Pdf Editor Version <= 13.2.1.23955
Foxit ≫ Pdf Editor Version >= 14.0.0.33046 <= 14.0.1.33197
Foxit ≫ Pdf Editor Version >= 2023.1.0.15510 <= 2023.3.0.23028
Foxit ≫ Pdf Editor Version >= 2024.1.0.23997 <= 2024.4.1.27687
Foxit ≫ Pdf Editor Version >= 2025.1.0.27937 <= 2025.2.1.33197
Foxit ≫ Pdf Reader Version <= 2025.2.1.33197
Foxit ≫ Pdf Editor Version <= 13.2.1.63315
Foxit ≫ Pdf Editor Version >= 14.0.0.33046 <= 14.0.1.69005
Foxit ≫ Pdf Editor Version >= 2023.1.0.15510 <= 2023.3.0.63083
Foxit ≫ Pdf Editor Version >= 2024.1.0.23997 <= 2024.4.1.66479
Foxit ≫ Pdf Editor Version >= 2025.1.0.27937 <= 2025.2.1.69005
Foxit ≫ Pdf Reader Version <= 2025.2.1.69005
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.072 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| 14984358-7092-470d-8f34-ade47a7658a2 | 5.3 | 1.8 | 3.4 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://www.foxit.com/support/security-bulletins.html