Approved changes feed: RSS · Atom

cpe:2.3:a:foxit:pdf_reader:2025.1.0.27937:*:*:*:*:*:*:*

part: a version: 2025.1.0.27937 update: *

VendorFoxit (3778a6df-af29-5bee-a995-959672e13d77)
ProductPdf Reader (e9c9f198-a64d-5586-91d0-9e5c428b0da1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32451 vulnerable 2026-06-03 15:00:40.847998 Details available
HIGH (8.8)
A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.
Published: 2025-08-13T13:37:18.689Z
Updated: 2025-11-03T19:53:29.625Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.