VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Dec 11, 2025· Updated Jun 17, 2026

CVE-2025-55309

CVE-2025-55309

Description

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contain JavaScript that attaches an OnBlur action on a form field that destroys an annotation. During user right-click interaction, the program's internal focus change handling prematurely releases the annotation object, resulting in a use-after-free vulnerability that may cause memory corruption or application crashes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Foxitsoftware/PDF Editor4 versions
    cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*range: <=13.1.7.63027
    • cpe:2.3:a:foxit:pdf_editor:2025.1.0.27937:*:*:*:*:*:*:*
    • cpe:2.3:a:foxit:pdf_editor:2025.1.0.66692:*:*:*:*:*:*:*
    • (no CPE)range: <13.2, <2025.2
  • Foxitsoftware/PDF Reader
    cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
    Range: <=2025.1.0.66692
  • Foxit/PDF and Editor for Windows and macOSdescription
  • Foxitsoftware/PDFllm-create
    Range: <13.2, <2025.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.