CVE-2017-16589

CVE-2017-16589 is a sensitive information disclosure vulnerability affecting Foxit Reader version 8.3.1.21155. It stems from improper validation of user-supplied data when parsing SIZ markers, leading to a read past the end of an allocated object. The vulnerability has a CVSS score of 6.5 (Medium), requiring user interaction (e.g., opening a malicious file) for exploitation and potentially allowing an attacker to disclose sensitive information. While it could be chained with other vulnerabilities for code execution, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.