The vulnerability involves Foxit PDF Editor/Reader's FileOpen plugin failing to properly validate certain encryption metadata in specially crafted PDF files. This improper validation can leave an internal pointer in an invalid state, leading to chained read and write access violations. The consequence of this flaw is the potential for arbitrary code execution, which could be triggered by a user opening a malicious PDF document. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability, with attack vector local, low attack complexity, no privileges required, and user interaction required.

Successful exploitation could allow an attacker to execute arbitrary code on the affected system with the privileges of the user opening the malicious PDF file. This impacts confidentiality, integrity, and availability of the system. However, exploitation requires local access and user interaction (opening the file). There are no known exploits in the wild at this time.

No patch or official remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening PDF files from untrusted sources, especially those using the FileOpen plugin.