This vulnerability arises from improper validation of form objects and their internal dictionary pointers during JavaScript execution on PDF list box fields in Foxit PDF Editor. Repeated operations after form resets cause the application to access invalid or uninitialized memory, resulting in a use-after-free condition that leads to illegal pointer reads and crashes. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. No patch or official remediation has been disclosed by the vendor as of the publication date.

Successful exploitation causes the application to crash due to illegal pointer reads from use-after-free conditions. The CVSS vector indicates high impact on confidentiality, integrity, and availability, suggesting potential for serious disruption or data compromise, although no known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening PDFs with JavaScript, especially those containing list box fields and form resets. No vendor-provided mitigations or workarounds are currently documented.