{"id":"CVE-2025-55308","aliases":["EUVD-2025-202711","GHSA-9rvx-wgxm-jc7g"],"status":"published","title":"An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A...","description":"An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while internal objects are still in use can cause premature release of these objects. This use-after-free vulnerability may lead to memory corruption, potentially resulting in information disclosure when the PDF is opened.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.0015,"percentile":0.04215,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-416"],"published":"2025-12-11T00:00:00Z","modified":"2026-10-14T21:10:00Z","products":[{"vendor":"foxit","product":"pdf_editor"},{"vendor":"foxit","product":"pdf_reader"}],"references":[{"url":"https://www.foxit.com/support/security-bulletins.html","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55308"},{"url":"https://github.com/advisories/GHSA-9rvx-wgxm-jc7g"}],"sources":{"cve":[{"id":"CVE-2025-55308","description":"An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while internal objects are still in use can cause premature release of these objects. This use-after-free vulnerability may lead to memory corruption, potentially resulting in information disclosure when the PDF is opened.","status":"published","published":"2025-12-11T00:00:00Z","modified":"2025-12-11T20:09:26.261Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:32:52.839698Z"}],"euvd":[{"id":"EUVD-2025-202711","description":"An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while internal objects are still in use can cause premature release of these objects. This use-after-free vulnerability may lead to memory corruption, potentially resulting in information disclosure when the PDF is opened.","status":"published","published":"2025-12-11T00:00:00Z","modified":"2025-12-11T20:09:26Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:06.185947Z"}],"ghsa":[{"id":"GHSA-9rvx-wgxm-jc7g","title":"An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A...","description":"An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while internal objects are still in use can cause premature release of these objects. This use-after-free vulnerability may lead to memory corruption, potentially resulting in information disclosure when the PDF is opened.","status":"published","published":"2025-12-11T18:30:43Z","modified":"2025-12-11T21:32:38Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:05:10.314009Z"}],"nvd":[{"id":"CVE-2025-55308","description":"An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2. A crafted PDF containing JavaScript that calls closeDoc() while internal objects are still in use can cause premature release of these objects. This use-after-free vulnerability may lead to memory corruption, potentially resulting in information disclosure when the PDF is opened.","status":"published","published":"2025-12-11T16:16:25.163Z","modified":"2026-10-14T21:10:00.183Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:11:49.861863Z"}]}}