CVEvulnerability

CVE-2026-57237

7.8 HIGH Published 2026-07-08 Modified 2026-07-09 Official page ↗
Status
Analyzed
Published
2026-07-08
Last modified
2026-07-09
Assigner
14984358-7092-470d-8f34-ade47a7658a2
CVSS 3.1 (14984358-7092-470d-8f34-ade47a7658a2)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-416

Description

When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application.

Affected configurations

• foxit pdf editor (<= 13.2.4.24048) • foxit pdf editor (>= 14.0.0.33046 <= 14.0.4.33508) • foxit pdf editor (>= 2023.1.0.15510 <= 2023.3.0.23028) • foxit pdf editor (>= 2024.1.0.23997 <= 2024.4.1.27687) • foxit pdf editor (>= 2025.1.0.27937 <= 2025.3.0.35737) • foxit pdf editor (>= 2026.1.0.36452 <= 2026.1.1.36485) • foxit pdf reader (<= 2026.1.1.36485) • foxit pdf editor (<= 13.2.3.63444) • foxit pdf editor (>= 14.0.0.33046 <= 14.0.3.69295) • foxit pdf editor (>= 2023.1.0.15510 <= 2023.3.0.63083) • foxit pdf editor (>= 2024.1.0.23997 <= 2024.4.1.66479) • foxit pdf editor (>= 2025.1.0.27937 <= 2025.3.0.69570) • foxit pdf editor (>= 2026.1.0.36452 <= 2026.1.1.70276) • foxit pdf reader (<= 2026.1.1.70276)

Related

Weakness · CWE (1)

References