CVE-2025-59802High· 7.5▾ TwilightFoxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups (OCG) are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via OCG. When Optional Content Groups (OCG) are supported, the state property of an OCG is runtime-only and not included in the digital signature computation buffer. An attacker can leverage JavaScript or PDF triggers to dynamically change the visibility of OCG content after signing (Post-Sign), allowing the visual content of a signed PDF to be modified without invalidating the signature. This may result in a mismatch between the signed content and what the signer or verifier sees, undermining the trustworthiness of the digital signature. The fixed versions are 2025.2.1, 14.0.1, and 13.2.1.
pdf_editor <= 13.2.0.63256pdf_editor >= 2023.1.0.55583, <= 2023.3.0.63083pdf_editor >= 2024.1.0.63682, <= 2024.4.1.66479pdf_editor = 14.0.0.68868pdf_editor = 2025.1.0.66692pdf_editor = 2025.2.0.68868pdf_reader <= 2025.2.0.68868pdf_editor <= 13.2.0.23874pdf_editor >= 2023.1.0.15510, <= 2023.3.0.23028pdf_editor >= 2024.1.0.23997, <= 2024.4.1.27687pdf_editor = 14.0.0.33046pdf_editor = 2025.1.0.27937pdf_editor = 2025.2.0.33046pdf_reader <= 2025.2.0.33046Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-59803Medium· 5.3Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers
CVE-2025-55312High· 7.8An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2
CVE-2025-55313High· 7.8An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2
CVE-2025-55314High· 7.8An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2
CVE-2025-55308Medium· 6.7An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2
CVE-2025-55309Medium· 6.7An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2