ZDI-25-1178: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-66497.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-1178?
ZDI-25-1178 has a CVSS score indicating a medium severity level.
How do I fix ZDI-25-1178?
To mitigate ZDI-25-1178, update your Foxit PDF Reader to the latest version provided by the vendor.
What systems are affected by ZDI-25-1178?
ZDI-25-1178 affects all installations of Foxit PDF Reader that are not up to date.
How can attackers exploit ZDI-25-1178?
Attackers can exploit ZDI-25-1178 by tricking users into visiting a malicious webpage or opening a malicious PDF file.
What information can be disclosed due to ZDI-25-1178?
ZDI-25-1178 allows for the disclosure of sensitive information from the affected system if successfully exploited.