The vulnerability in Foxit PDF Editor arises from the PRC file header parsing logic that trusts the constructed file structure description without validating the underlying array elements. This leads to out-of-bounds reads (CWE-125), which can cause the application to crash. The CVSS 3.1 base score is 6.1, reflecting a medium severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact. No known exploits are reported in the wild, and no vendor-provided patch or remediation level is currently available.

Successful exploitation results in out-of-bounds memory reads that can cause application crashes, impacting availability. Confidentiality and integrity impacts are low or none. The attack requires local access and user interaction, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening PRC files from untrusted sources to avoid triggering the vulnerability.