The FileOpen plugin in Foxit PDF Editor and Reader does not fully validate encryption metadata in PDF files, which can leave an internal pointer in an invalid state. The flaw is a classic uninitialized variable condition (CWE‑822) that may trigger chained read and write access violations, allowing an attacker to execute arbitrary code. The vulnerability follows the typical remote code execution pattern when a malicious PDF is opened by a vulnerable instance of the application.

Foxit Software Inc. products impacted are Foxit PDF Editor and Foxit PDF Reader. No specific version numbers are listed in the advisory, so any currently installed release could potentially be affected until the vendor releases a patch.

The CVSS score of 7.8 reflects a high risk of exploitation. The EPSS score is below 1 %, indicating a low probability of widespread exploitation at present, and the vulnerability is not present in the CISA KEV catalog. Attacks would most likely involve an adversary delivering a crafted PDF to a user or system that allows the application to open the file. Successful exploitation would give the attacker code execution privileges on the affected system.