CVE-2010-20010

High

Description

Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A specially crafted PDF with an overlong Title string can overflow a fixed-size stack buffer, corrupt the Structured Exception Handler (SEH) chain, and lead to arbitrary code execution in the context of the user who opens the file.

SeverityHigh

CVSS8.4

Exploit probability—

ProductFoxit PDF Reader

PublishedAug 20, 2025

First seenAug 20, 2025

Weakness typeCWE-121CWE-121

How to fix

Update

Foxit Software Foxit PDF Reader4.2.0.0928 or later

Patches

foxit.com/pdf-reader/version-history.html

Affected products

Product	Affected versions	Fixed in
Foxit Software Foxit PDF Reader	v < 4.2.0.0928	4.2.0.0928

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.