Threats tagged 'ghsa-6rrf-jvv2-v2hc'

CVE-2025-32451 is a high-severity memory corruption vulnerability in Foxit Reader version 2025.1.0.27937 caused by the use of an uninitialized pointer. It can be triggered by specially crafted JavaScript code embedded in a malicious PDF or via a malicious website if the browser plugin is enabled. Successful exploitation may lead to arbitrary code execution after tricking a user into opening the malicious file or visiting the malicious site.