CVE-2020-8878

CVE-2020-8878 is a critical vulnerability affecting Foxit Studio Photo 3.6.6.916, allowing remote attackers to execute arbitrary code. The flaw, a write past the end of an allocated structure when handling PSD files, requires user interaction, such as opening a malicious file or visiting a malicious page. With a CVSS score of 8.8 (High), successful exploitation grants an attacker code execution in the context of the current process. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is there evidence of active exploitation or significant community discussion.