Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-57243 EUVD-2026-42208GHSA-9ppj-8p5h-jg89

Foxit PDF Editor/Reader Page Out-of-bounds Read Vulnerability

Published Jul 8, 2026 · Updated Jul 8, 2026 · Assigned by Foxit

Description

During the process of page opening and form formatting, a JavaScript reentrancy results in an inconsistent document status. Subsequently, with outdated page information, the application attempts to access invalid addresses, causing the application to crash.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit PDF Editor Versions 2026.1.1 and earlier, Versions 14.0.4 and earlier, Versions 13.2.4 and earlier —
Foxit Software Foxit PDF Reader Versions 2026.1.1 and earlier —

Advisories 1

References