← Back

CVE-2025-66499

nvd nist
Published: Dec 19, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: 14984358-7092-470d-8f34-ade47a7658a2 (Secondary)

Description

A heap-based buffer overflow vulnerability exists in the PDF parsing of Foxit PDF Reader when processing specially crafted JBIG2 data. An integer overflow in the calculation of the image buffer size may occur, potentially allowing a remote attacker to execute arbitrary code.

Affected (12)

Foxit
2 products
Pdf Editor
Pdf Reader
Configuration A
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Foxit
Pdf Editor
version ≤ 13.2.1.23955
Pdf Editor
14.0.0.33046 ≤ version ≤ 14.0.1.33197
Pdf Editor
2023.1.0.15510 ≤ version ≤ 2023.3.0.23028
Pdf Editor
2024.1.0.23997 ≤ version ≤ 2024.4.1.27687
Pdf Editor
2025.1.0.27937 ≤ version ≤ 2025.2.1.33197
Pdf Reader
version ≤ 2025.2.1.33197
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Foxit
Pdf Editor
version ≤ 13.2.1.63315
Pdf Editor
14.0.0.33046 ≤ version ≤ 14.0.1.69005
Pdf Editor
2023.1.0.15510 ≤ version ≤ 2023.3.0.63083
Pdf Editor
2024.1.0.23997 ≤ version ≤ 2024.4.1.66479
Pdf Editor
2025.1.0.27937 ≤ version ≤ 2025.2.1.69005
Pdf Reader
version ≤ 2025.2.1.69005
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (1)

Source: 14984358-7092-470d-8f34-ade47a7658a2
Vendor Advisory

Timeline

No history available yet.