CVE-2020-27855

Vulnerability

An out-of-bounds read vulnerability exists in Foxit Studio Photo version 3.6.6.922 [1] during the parsing of SR2 files. The flaw arises because the software does not properly validate user-supplied data, resulting in a read past the end of an allocated structure [2]. User interaction is required: the target must visit a malicious page or open a malicious file [2].

Exploitation

An attacker can remotely exploit this vulnerability by crafting a malicious SR2 file and convincing a user to open it (or view a page that triggers the file load) [2]. No authentication or special privileges are needed, as the attack vector is local with user interaction. The specific code path is reachable when Foxit Studio Photo processes the malformed SR2 data.

Impact

Successful exploitation leads to disclosure of sensitive information from the affected process's memory, which could include data useful for further attacks [2]. The issue can be chained with other vulnerabilities to achieve arbitrary code execution in the context of the current process [2]. The CVSS base score is 3.3 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) [2], indicating limited impact on confidentiality and no impact on integrity or availability.

Mitigation

As of the available references, no specific fix version for Foxit Studio Photo has been published. Foxit's general security bulletin (as of 2026) only lists updates for Foxit PDF Reader and Foxit PDF Editor [1], not for Studio Photo. Users should monitor the Foxit security bulletins [1] for an update. No workaround is described in the disclosed sources.