CVE-2025-66496

7.8 highEPSS 0.2%

High (7.8) in foxit. EPSS 0.2% chance of exploitation in the next 30 days.

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When opening a PDF file containing malformed or specially crafted PRC content, out-of-bounds memory access may occur, resulting in memory corruption.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-11-01)
CWEs: CWE-787, CWE-125
Published: 2025-12-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

foxit:pdf_editor
foxit:pdf_reader

References

https://www.foxit.com/support/security-bulletins.html

Check your stack JSON