Low severity3.3NVD Advisory· Published Dec 11, 2025· Updated Jun 17, 2026
CVE-2025-55307
CVE-2025-55307
Description
An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. Opening a malicious PDF containing a crafted JavaScript call to search.query() with a crafted cDIPath parameter (e.g., "/") may cause an out-of-bounds read in internal path-parsing logic, potentially leading to information disclosure or memory corruption.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6<13.2, <2025.2+ 2 more
- (no CPE)range: <13.2, <2025.2
- cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*range: <=13.1.7.23637
- cpe:2.3:a:foxit:pdf_editor:2025.1.0.27937:*:*:*:*:*:*:*
- Range: <13.2, <2025.2
Patches
Vulnerability mechanics
References
1- www.foxit.com/support/security-bulletins.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.