CVE-2013-10068: Foxit Reader

Critical severity, CVSS 9.4. EPSS: 1.4% chance of exploitation in the next 30 days.

Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module. When a PDF file is loaded from a remote host, an overly long query string in the URL can overflow a buffer, allowing remote attackers to execute arbitrary code.

Affected products

• Foxit Foxit Reader: up to and including 5.4.5.0114

Published 2025-08-05. Last modified 2026-06-16.