This vulnerability involves a use-after-free condition (CWE-416) in Foxit PDF Editor. When the application processes a PDF with JavaScript that resets form fields, the script re-enters the interface, resulting in operations on a damaged native object. The lack of validation on this object leads to a function call on invalid memory, causing the application to crash. The CVSS 3.1 base score is 7.8, reflecting local attack vector with low complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. No patch or official remediation information is currently available, and no known exploits in the wild have been reported.

Successful exploitation causes the application to crash due to use-after-free, impacting availability. The CVSS score indicates high impact on confidentiality and integrity as well, suggesting potential for further exploitation beyond crashing, though no such details are provided. The vulnerability requires local access and user interaction to trigger.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening PDFs containing JavaScript, especially from untrusted sources. Monitor Foxit Software Inc. advisories for updates and apply official patches once released.