CVE-2022-25641: Foxit PDF Editor

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsing within signed documents. This leads to delivery of incorrect signature information via an Incremental Saving Attack and a Shadow Attack.

Affected products

• Foxit PDF Editor: from 11.0, before 11.2.2 (fixed in 11.2.2)
• Foxit PDF Reader: from 11.0, before 11.2.2 (fixed in 11.2.2)
• Foxit Phantompdf: before 10.1.8 (fixed in 10.1.8)

Published 2022-08-29. Last modified 2026-06-17.