This vulnerability involves a use-after-free condition in the PDF page-tree handling component of Foxit PDF Editor and Reader. When processing a maliciously crafted PDF, the application may modify page structures during rendering, resulting in access to memory that has already been freed. This can cause memory corruption and crash the application. The CVSS 3.1 base score is 7.8, indicating high impact on confidentiality, integrity, and availability. No exploit in the wild or patch details are currently known.

Successful exploitation can lead to memory corruption and application crashes, potentially allowing an attacker to disrupt service or cause denial of service. The CVSS vector indicates local attack vector with low complexity, no privileges required, but user interaction is needed. Confidentiality, integrity, and availability impacts are all high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid opening untrusted PDF files with Foxit PDF Editor or Reader to reduce risk.