ZDI-CAN-28558: ZDI-25-1180: Foxit PDF Reader PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Published Dec 19, 2025

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66499.

Affected Software

1 affected component

Foxit Foxit PDF Reader

Event History

Dec 19, 2025

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28558?

ZDI-CAN-28558 has a high severity rating due to its potential for remote code execution.

How do I fix ZDI-CAN-28558?

To fix ZDI-CAN-28558, users should update their Foxit PDF Reader to the latest available version.

What type of attack can ZDI-CAN-28558 be used for?

ZDI-CAN-28558 can be exploited to execute arbitrary code remotely on affected systems.

Is user interaction required for exploiting ZDI-CAN-28558?

Yes, user interaction is necessary as the target must either visit a malicious webpage or open a malicious file.

Which software is affected by ZDI-CAN-28558?

ZDI-CAN-28558 affects Foxit PDF Reader installations.