Skip to content
OpenAdvisories
High · 7.8 CVE-2026-57249 EUVD-2026-42204GHSA-f8mh-5vwp-p567

Foxit PDF Editor/Reader Annotation Use-After-Free Vulnerability

Published Jul 8, 2026 · Updated Jul 8, 2026 · Assigned by Foxit

Description

After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the re-entry process, the application access invalid objects and crashed.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit PDF Editor Versions 2026.1.1 and earlier, Versions 14.0.4 and earlier, Versions 13.2.4 and earlier —
Foxit Software Foxit PDF Reader Versions 2026.1.1 and earlier —

Advisories 1

References