This vulnerability involves Foxit PDF Editor improperly handling a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is not validated, causing an illegal pointer to be read out-of-bounds, which results in a crash of the application. The CVSS 3.1 vector indicates local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact.

Successful exploitation leads to an out-of-bounds read causing the application to crash, resulting in a denial of service. There is no indication of confidentiality or integrity compromise. The impact is limited to availability disruption of the Foxit PDF Editor application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been published at this time.