CVE-2022-25108: Foxit PDF Editor

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without proper validation.

Affected products

• Foxit PDF Editor: before 10.1.7 (fixed in 10.1.7); from 11.0, before 11.2.1 (fixed in 11.2.1)
• Foxit PDF Reader: before 11.2.1 (fixed in 11.2.1)

Published 2022-03-10. Last modified 2026-06-17.