CVE-2024-12751

Deeper analysis

CVE-2024-12751 is an out-of-bounds read vulnerability in the AcroForm handling code of Foxit PDF Reader that can lead to remote code execution. The flaw stems from insufficient validation of user-supplied data, allowing a read past the end of an allocated buffer. Successful exploitation grants arbitrary code execution in the context of the current process. The issue was originally reported as ZDI-CAN-25344 and carries a CVSS 3.0 score of 7.8.

Remote attackers can exploit the vulnerability by convincing a target to open a malicious PDF file or visit a malicious page. No authentication or elevated privileges are required, though user interaction is necessary. The attack runs entirely within the reader's process and can result in full confidentiality, integrity, and availability impact on the affected system.

Foxit has published a security bulletin addressing the issue, and the Zero Day Initiative has released advisory ZDI-24-1737 that includes additional technical details for defenders.

The EPSS score for this CVE rose from a low baseline to a peak of 0.0504 on 2026-02-07 before receding to its current value of 0.0289, indicating that exploitation interest increased after disclosure.