VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 19, 2025· Updated Jun 17, 2026

CVE-2025-66499

CVE-2025-66499

Description

A heap-based buffer overflow vulnerability exists in the PDF parsing of Foxit PDF Reader when processing specially crafted JBIG2 data. An integer overflow in the calculation of the image buffer size may occur, potentially allowing a remote attacker to execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Foxitsoftware/PDF Editor
    cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
    Range: <=13.2.1.23955
  • Foxitsoftware/PDF Reader2 versions
    cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*range: <=2025.2.1.33197
    • (no CPE)
  • Foxit Software Inc./Foxit PDF Editorv5
    Range: Versions 2025.2.1 and earlier
  • Foxit Software Inc./Foxit PDF Readerv5
    Range: Versions 2025.2.1 and earlier

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.