This vulnerability in Foxit PDF Editor occurs because the application opens a PDF and executes JavaScript that manipulates the page and document objects. These operations cause the internal page-related objects to become unsynchronized. Despite this, the renderer relies on an outdated page count, resulting in an out-of-bounds read that crashes the application. The CVSS 3.1 base score is 6.1, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, user interaction needed, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact. No patch or official remediation is currently documented.

The vulnerability can cause the Foxit PDF Editor application to crash due to out-of-bounds memory access. This results in a denial of service (application crash) but does not impact confidentiality or integrity. Exploitation requires local access and user interaction. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening PDFs with untrusted JavaScript content. No official remediation or temporary fix has been documented.