This vulnerability in Foxit PDF Editor arises from improper handling of object references when scripts modify documents containing structural anomalies. The internal state of page elements becomes inconsistent with their index, resulting in use-after-free conditions. When the application queries page information under these conditions, it accesses invalid pointers, leading to crashes. Affected versions include 2026.1 and earlier, 14.0.3 and earlier, and 13.2.3 and earlier. The CVSS 3.1 score of 7.8 reflects high impact on confidentiality, integrity, and availability with low attack complexity and no privileges required but user interaction needed.

Successful exploitation can cause application crashes due to use-after-free memory access, potentially leading to denial of service and possibly arbitrary code execution given the high confidentiality, integrity, and availability impact ratings. However, no known exploits are reported in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening untrusted PDF documents and consider limiting exposure to potentially malicious files. Monitor Foxit Software Inc. advisories for updates.