This vulnerability (CWE-347) in Foxit PDF Editor/Reader affects the signature validation process for incrementally updated PDF documents. Specifically, modifications to visible document content after signing may not trigger signature invalidation, allowing altered content to appear as legitimately signed. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No affected versions or patch information are provided in the available data.

An attacker can modify visible content in a signed PDF document without invalidating the digital signature, potentially enabling content spoofing. This undermines the trustworthiness of the signature and the document's integrity. There is no indication of confidentiality or availability impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when relying on signatures in incrementally updated PDF documents and consider additional verification methods.