CVE-2025-55311: pdf editor 2025.1.0.66692, 2025.1.0.27937; +2 more affected products

Affected technology

pdf editor · through 13.1.7.63027 (inclusive)
foxit

pdf editor · from 2023.1.0.55583 (inclusive), through 2023.3.0.63083 (inclusive)
foxit

pdf editor · from 2024.1.0.63682 (inclusive), through 2024.4.1.66479 (inclusive)
foxit

pdf editor · 2025.1.0.66692
foxit

pdf reader · through 2025.1.0.66692 (inclusive)
foxit

pdf editor · through 13.1.7.23637 (inclusive)
foxit

pdf editor · from 2023.1.0.15510 (inclusive), through 2023.3.0.23028 (inclusive)
foxit

pdf editor · from 2024.1.0.23997 (inclusive), through 2024.4.1.27687 (inclusive)
foxit

pdf editor · 2025.1.0.27937
foxit

pdf reader · through 2025.1.0.27937 (inclusive)
foxit

n/a · n/a
Vendor not specified by the source

Description’s affected range: before 13.2 and 2025 before 2025.2

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

An attacker can mislead users about the document's integrity and compromise the trustworthiness of signed PDFs. Source advisory’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality and availability impact as none; integrity impact as high.