CVEvulnerability
CVE-2026-57252
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-07-08
- Last modified
- 2026-07-09
- Assigner
- 14984358-7092-470d-8f34-ade47a7658a2
- CVSS 3.1 (14984358-7092-470d-8f34-ade47a7658a2)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
When the application opens a PDF file, during the process of JavaScript deleting pages and removing attachment annotations, it will cause the attachment panel to continue accessing invalid pointers, eventually leading to the application crashing.
Affected configurations
• foxit pdf editor (<= 13.2.4.24048)
• foxit pdf editor (>= 14.0.0.33046 <= 14.0.4.33508)
• foxit pdf editor (>= 2023.1.0.15510 <= 2023.3.0.23028)
• foxit pdf editor (>= 2024.1.0.23997 <= 2024.4.1.27687)
• foxit pdf editor (>= 2025.1.0.27937 <= 2025.3.0.35737)
• foxit pdf editor (>= 2026.1.0.36452 <= 2026.1.1.36485)
• foxit pdf reader (<= 2026.1.1.36485)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://www.foxit.com/support/security-bulletins.html Vendor Advisory