CVE-2021-31433

CVE-2021-31433 is a remote code execution vulnerability affecting Foxit Studio Photo 3.6.6.931 on Windows. It stems from improper validation of user-supplied data during ARW file parsing, leading to a write past the end of an allocated data structure. This vulnerability has a CVSS score of 7.8 (High), requiring user interaction (e.g., opening a malicious file) for exploitation, and allows an attacker to execute code in the context of the current process. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.