Vulnerabilities CVE-2025-66497

CVE-2025-66497

Medium

Open

TLP:CLEAR

Foxit PDF Reader 3D Annotation Out-of-Bounds Memory Access Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A memory corruption vulnerability exists in the 3D annotation handling of Foxit PDF Reader due to insufficient bounds checking when parsing PRC data. When opening a PDF file containing malformed or specially crafted PRC content, out-of-bounds memory access may occur, resulting in memory corruption.

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.18%

8th percentile
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Confidence: 90%
Published: Dec 19, 2025
Last Modified: May 9, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.