This vulnerability in Foxit PDF Editor involves a lack of input size validation during a buffer copy operation within the signature verification plugin. When JavaScript triggers signature verification on abnormally constructed objects, the plugin copies an abnormal string without validating its size, causing a crash. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation can cause the application to crash, resulting in denial of service. The CVSS vector indicates potential high impact on confidentiality, integrity, and availability, suggesting that exploitation might lead to more severe consequences beyond crashing, but details are not provided. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening untrusted PDF files containing JavaScript or signatures. No official remediation or temporary fixes have been published by the vendor.