The vulnerability arises from a use‑after‑free flaw in the handling of PDF annotations. A damaged field tree causes the JavaScript engine to traverse invalid pointers, leaving the editor with a dangling form object. When the application later accesses the field property path, it dereferences this freed pointer, causing a crash. The resulting denial of service is the only observable effect; no evidence of arbitrary code execution is documented.

Foxit Software Inc.’s Foxit PDF Editor and Foxit PDF Reader are affected. No specific version numbers are listed, so all current releases that implement the vulnerable field‑tree traversal could potentially be impacted until the vendor releases a fix.

The flaw has a CVSS score of 7.8, which places it in the high‑severity range. The EPSS metric is below 1%, indicating a low probability of exploitation at present. It is not included in the CISA KEV catalog. The documented attack scenario requires a malicious PDF containing a damaged field tree and a user who opens the document. While the CVE name mentions remote code execution, the available description only supports a crash, and no public exploitation has been reported.