Technical impact
The vulnerability is a use‑after‑free flaw in the page‑tree handling code of Foxit PDF Editor and Reader. A PDF crafted to change the page structure while rendering can cause the application to reference memory that has already been freed, leading to memory corruption and a crash. The available description does not explicitly state arbitrary code execution, so the primary impact as described is a denial‑of‑service through application termination.
Affected Systems
Foxit Software Inc. products, specifically Foxit PDF Editor and Foxit PDF Reader, are affected. No version restrictions are provided, implying that all installations could be vulnerable until a vendor fix is released.
Risk and Exploitability
The CVSS base score of 7.8 indicates a high‑impact vulnerability. The EPSS score is below 1 %, suggesting a low probability of exploitation at this time, and it is not currently listed in the CISA KEV catalog. The likely attack vector is inferred to be a local user or an attacker who can supply a malicious PDF document to the victim. If the user opens such a file, the application will crash; a more severe effect is not reported by the vendor or the CVE description.
