CVE-2019-13331

CVE-2019-13331 is a remote code execution vulnerability affecting Foxit Reader 9.5.0.20723, specifically within its JPG file parsing capabilities. This flaw stems from improper validation of user-supplied data, leading to a read past the end of an allocated buffer. Successful exploitation requires user interaction, such as opening a malicious file or visiting a malicious web page, and could allow an attacker to execute arbitrary code in the context of the current process. Rated with a CVSS score of 7.8 (High), this vulnerability has a local attack vector and low attack complexity, but high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.