Insufficient parameter verification in Foxit PDF Editor and Foxit PDF Reader allows a malformed PDF file to trigger format errors, which in turn cause an unhandled std::invalid_argument exception and force the program to terminate. This weakness corresponds to CWE‑248 and results in a denial‑of‑service condition for the user without directly compromising confidentiality or integrity.

Affected products are Foxit PDF Editor and Foxit PDF Reader from Foxit Software Inc. No specific version numbers are available in the current data set.

The CVSS score of 5.5 represents a medium severity. The EPSS score of less than 1% indicates that exploitation is currently unlikely. The vulnerability is not listed in CISA’s KEV catalog. The most plausible attack vectors involve a remote attacker supplying a crafted PDF file that the user opens with the affected application, triggering the unhandled exception and terminating the program. Because the flaw stems from insufficient input validation, an attacker could trigger the denial‑of‑service simply by providing an improperly formatted file.