Foxit PDF Editor and Reader contain a heap‑based out‑of‑bounds read that arises when the software processes PDF image objects with inconsistent compression metadata. The decoder underestimates the required buffer size and reads memory beyond the allocated area while rendering. This flaw can cause an application crash. The vulnerability is known as an out‑of‑bounds read weakness.

Foxit PDF Editor and Foxit PDF Reader applications are affected. No specific version information is disclosed in the available data.

The CVSS score is 6.1, indicating moderate severity. The EPSS score is reported as less than 1 %, suggesting very low current exploitation probability. The vulnerability is not identified in CISA’s known exploited vulnerabilities catalog. The likely attack window is local or remote, in that a malicious PDF file can be crafted and presented to a user. The attacker would need the victim to open the compromised file; no network‑only vector is described. The resulting crash could deny service.