Foxit PDF Editor improperly validates the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. Specifically, when a script modifies the zoom property and triggers a page change, the original view object may be destroyed while stale pointers remain and are later dereferenced. This use-after-free condition (CWE-416) can be triggered under crafted JavaScript and document structures, potentially allowing arbitrary code execution. The vulnerability affects multiple versions of Foxit PDF Editor up to 2025.3, 14.0.2, and 13.2.2. The CVSS 3.1 base score is 5.5, indicating medium severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and impact limited to availability.

The vulnerability can lead to a use-after-free condition that may allow an attacker to execute arbitrary code on the affected system. However, the attack requires local access and user interaction, and the impact is limited to availability disruption or potential code execution. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is currently available. Until a fix is released, users should exercise caution when opening untrusted PDF documents containing JavaScript and avoid interacting with suspicious content that modifies zoom and page state.