The vulnerability arises from faulty parsing of form field hierarchies in Foxit PDF Editor and Reader, where non‑signature data is incorrectly treated as valid signatures. This misidentification leads to invalid memory writes during internal data structure construction, which can result in program crashes or even the execution of arbitrary code if an attacker can influence the memory write patterns. The weakness is a classic input validation error, classified as CWE‑20.

Foxit Software’s PDF Editor and PDF Reader products are affected. No specific version information is supplied in the CNA data; the vulnerability applies to all editions of these products until corrected by an update.

With a CVSS score of 7.8 the issue is considered high severity. The EPSS score is less than 1%, indicating a low probability of widespread exploitation at present, and it is not included in the CISA KEV catalog. The likely attack vector is a crafted PDF file that a victim opens locally. If an attacker can host or send such a file, the flaw could compromise the targeted machine, potentially allowing execution of attacker‑supplied code on the system where the PDF is viewed.