Description

A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

INFO

Published Date :

2025-08-13T13:37:18.689Z

Last Modified :

2025-08-13T13:54:11.855Z

Source :

talos
AFFECTED PRODUCTS

The following products are affected by CVE-2025-32451 vulnerability.

Vendors Products
Foxit
  • Pdf Reader
  • Reader
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-32451.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact