Multiple Vulnerabilities in Foxit PDF Reader and Editor Could Allow for Arbitrary Code Execution

Multiple vulnerabilities were discovered in Foxit PDF Reader and Editor — including use-after-free, out-of-bounds read/write, privilege escalation, side-loading, and null pointer dereference issues — that could allow arbitrary code execution or denial of service; several CVEs are cited (CVE-2024-28888, CVE-2024-7725, CVE-2024-38393, CVE-2024-41605) and exploitation impact depends on the privileges of the logged-on user and weaknesses in the updater/installer validation.