Description
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups (OCG) are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage JavaScript or PDF triggers to dynamically change the visibility of OCG content after signing (Post-Sign), allowing the visual content of a signed PDF to be modified without invalidating the signature. This may result in a mismatch between the signed content and what the signer or verifier sees, undermining the trustworthiness of the digital signature. The fixed versions are 2025.2.1, 14.0.1, and 13.2.1.
INFO
Published Date :
2025-12-11T00:00:00.000Z
Last Modified :
2025-12-11T15:51:24.461Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2025-59802 vulnerability.
| Vendors | Products |
|---|---|
| Apple |
|
| Foxit |
|
| Microsoft |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-59802.
