This vulnerability involves a use-after-free condition in Foxit PDF Editor/Reader. When a specially crafted PDF is opened, scripts modify annotation rich-text attributes containing malformed font data. During the process of reconstructing annotation appearance, the software accesses an object that has already been freed, resulting in a use-after-free flaw that causes the application to crash. The CVSS 3.1 base score is 7.8, indicating high severity with high impact on confidentiality, integrity, and availability. The attack vector is local with low complexity, no privileges required, but user interaction is needed.

Successful exploitation can lead to application crashes and potentially allow an attacker to execute arbitrary code or cause denial of service. The vulnerability affects confidentiality, integrity, and availability with high impact as per the CVSS score.

No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should exercise caution when opening PDF files from untrusted sources and consider disabling script execution in Foxit PDF Editor/Reader if possible.