Foxit PDF Editor and Foxit PDF Reader contain an out-of-bounds write bug in the PDF rendering engine. When the applications process malformed DeviceN color space data within a PDF, the insufficient bounds checking allows an attacker to corrupt memory, potentially leading to a crash and remote code execution. The weakness corresponds to CWE‑787.

The vulnerability affects all versions of Foxit PDF Editor and Foxit PDF Reader distributed by Foxit Software Inc. No specific version ranges are listed in the advisory, so any installation remains potentially vulnerable until updated.

The CVSS score of 7.8 indicates high severity, while the EPSS score of less than 1% implies a very low probability of exploitation in the wild at present. The vulnerability is not included in the CISA KEV catalog. Attackers would likely deliver a specially crafted PDF containing DeviceN color space definitions that trigger the overrun; the exploit would execute when the user opens the file. Hence, the risk remains significant for organizations that allow untrusted PDFs to be opened on endpoints.