ZDI-25-1177: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66496.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-1177?
ZDI-25-1177 has a CVSS rating that indicates a critical severity level due to its potential to allow remote code execution.
How do I fix ZDI-25-1177?
To fix ZDI-25-1177, update your Foxit PDF Reader to the latest version provided by the vendor.
What types of attacks are possible with ZDI-25-1177?
ZDI-25-1177 allows attackers to execute arbitrary code if a user interacts with a malicious page or opens a compromised file.
Is user interaction required for ZDI-25-1177 exploitation?
Yes, user interaction is required for ZDI-25-1177 as the target must visit a malicious page or open a malicious file.
Which software is affected by ZDI-25-1177?
ZDI-25-1177 specifically affects installations of Foxit PDF Reader.