ZDI-26-721: Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Foxit PDF Editor/Reader contains a vulnerability in its U3D/GIF texture decoding path that lacks sufficient validation of image dimensions and size information. This flaw can cause incorrect memory allocation and a subsequent out-of-bounds write during pixel processing, potentially leading to remote code execution. An attacker could potentially exploit this to gain remote access or execute arbitrary code. The affected product is Foxit PDF Editor/Reader, and the current exploitation status is none known.

Do: Upgrade to patched versions of Foxit PDF Editor/Reader. Implement strict image dimension and size validation, disable U3D/GIF texture decoding paths, and enforce strict memory bounds to prevent out-of-bounds writes. Regularly audit deployed plugins and verify exposure of sensitive processing paths.