CVE-2021-31461: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2021-31461 is a type confusion vulnerability discovered in Foxit Reader version 10.1.1.37576. The vulnerability was reported on March 31, 2021, and publicly disclosed on May 7, 2021. This security flaw affects the handling of app.media objects in Foxit Reader (ZDI Advisory).

The vulnerability stems from the lack of proper validation of user-supplied data when handling app.media objects, which can result in a type confusion condition. The vulnerability has been assigned a CVSS score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating a high severity level (ZDI Advisory).

If successfully exploited, this vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader. The impact is significant as it could lead to complete system compromise, though user interaction is required as the target must visit a malicious page or open a malicious file (ZDI Advisory).

Foxit has released an update to address this vulnerability. Users are advised to update their Foxit Reader installations to the latest version available through the official Foxit support website (ZDI Advisory).