CVE-2021-34838: 
Foxit PDF Reader vulnerability analysis and mitigation

CVE-2021-34838 is a use-after-free remote code execution vulnerability affecting Foxit PDF Reader. The vulnerability was discovered and disclosed in July 2021. The issue affects the handling of Annotation objects in Foxit PDF Reader and could allow remote attackers to execute arbitrary code on affected installations (ZDI Advisory).

The vulnerability exists within the handling of Annotation objects in Foxit PDF Reader. The specific flaw results from the lack of validating the existence of an object prior to performing operations on the object. The vulnerability has a CVSS score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) (ZDI Advisory).

An attacker can leverage this vulnerability to execute code in the context of the current process. User interaction is required to exploit this vulnerability as the target must visit a malicious page or open a malicious file (NVD).

Foxit has issued an update to correct this vulnerability. Users should update to the latest version of the software through the official Foxit website or through the application's update mechanism (ZDI Advisory).