This vulnerability in Foxit PDF Editor involves a use-after-free condition (CWE-416) triggered by a script that resets annotation status and then triggers a reset form event. The re-entrant process leads to accessing invalid memory objects, resulting in application crashes. The CVSS 3.1 vector indicates the attack requires local access with low complexity, no privileges, and user interaction, affecting confidentiality, integrity, and availability at a high level. No patch or official remediation is currently documented, and no known exploits are reported in the wild.

Successful exploitation can cause the application to crash and potentially allow an attacker to execute arbitrary code, leading to full compromise of confidentiality, integrity, and availability of the affected system. The vulnerability requires local access and user interaction, which limits remote exploitation but still poses a significant risk to users opening crafted PDF files.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening untrusted PDF files and avoid running scripts embedded in PDFs. Monitor Foxit Software Inc. advisories for updates on patches or official mitigations.