CVE-2025-55307

CWE-125 — Out-of-bounds Read4 documents4 sources
Severity
3.3LOW
EPSS
0.0%
top 98.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Foxit PDF EditorFoxit PDF Reader
Timeline
PublishedDec 11

Description

An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. Opening a malicious PDF containing a crafted JavaScript call to search.query() with a crafted cDIPath parameter (e.g., "/") may cause an out-of-bounds read in internal path-parsing logic, potentially leading to information disclosure or memory corruption.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶NVDfoxit/pdf_editor2023.1.0.15510 — 2023.3.0.23028+3
▶NVDfoxit/pdf_reader2025.1.0.27937

🔴Vulnerability Details

2
GHSA
GHSA-r7rp-ff5g-fjhv: An issue was discovered in Foxit PDF and Editor for Windows before 13↗2025-12-11
▶
CVEList
CVE-2025-55307: An issue was discovered in Foxit PDF and Editor for Windows before 13↗2025-12-11
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-55307 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-55307 (LOW CVSS 3.3) | An issue was discovered in Foxit PD | cvebase.io