CVE-2021-31458: 
NixOS vulnerability analysis and mitigation

CVE-2021-31458 is a use-after-free vulnerability discovered in Foxit Reader version 10.1.1.37576. The vulnerability was disclosed on May 7th, 2021, and affects the handling of Annotation objects in the software (ZDI Advisory).

The vulnerability has a CVSS v3.1 score of 7.8 (High), with the following vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The specific flaw exists within the handling of Annotation objects and results from the lack of validating the existence of an object prior to performing operations on the object (ZDI Advisory).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process. The attack requires user interaction, as the target must visit a malicious page or open a malicious file (ZDI Advisory).

The vulnerability requires user interaction to be exploited, where the target must visit a malicious page or open a malicious file. The attack can be performed remotely, though local access is required for successful exploitation (ZDI Advisory).

Foxit has issued an update to correct this vulnerability. Users should update their software to the latest version through the vendor's official website (ZDI Advisory).