Description (CNA)
The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers are still kept and later dereferenced, which under crafted JavaScript and document structures can lead to a use-after-free condition and potentially allow arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Foxit Software Inc. / Foxit PDF Editor | affected Versions 2025.3 and earlier; affected Versions 14.0.2 and earlier; affected Versions 13.2.2 and earlier |
| Foxit Software Inc. / Foxit PDF Reader | affected Versions 2025.3 and earlier |
CWE
CWE-416
References
ADP enrichment
No English description supplied.
No references supplied.