CVE-2025-66496

Published: Dec 19, 2025Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When opening a PDF file containing malformed or specially crafted PRC content, out-of-bounds memory access may occur, resulting in memory corruption.

Affected (6)

Products: Foxit: Pdf Editor, Pdf Reader

Foxit

2 products

Pdf Editor

Pdf Reader

Configuration A

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Foxit Pdf Editor	Up to 13.2.1.23955
Foxit Pdf Editor	From 14.0.0.33046 to 14.0.1.33197
Foxit Pdf Editor	From 2023.1.0.15510 to 2023.3.0.23028
Foxit Pdf Editor	From 2024.1.0.23997 to 2024.4.1.27687
Foxit Pdf Editor	From 2025.1.0.27937 to 2025.2.1.33197
Foxit Pdf Reader	Up to 2025.2.1.33197

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.foxit.com/support/security-bulletins.html

Source: 14984358-7092-470d-8f34-ade47a7658a2

Vendor Advisory

Timeline

No history available yet.