CVE-2019-13325

CVE-2019-13325 is a critical remote code execution vulnerability affecting Foxit Studio Photo 3.6.6.909. It stems from improper validation of user-supplied data in EPS file handling, leading to a read past the end of an allocated structure. With a CVSS score of 7.8 (High), successful exploitation requires user interaction, typically by opening a malicious file or visiting a malicious page, allowing an attacker to execute code in the context of the current process. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.