Skip to content
OpenAdvisories
High · 7.8 CVE-2026-57250 EUVD-2026-42193GHSA-2mpx-xxgw-cq6p

Foxit PDF Editor/Reader Form Field Use-After-Free Vulnerability

Published Jul 8, 2026 · Updated Jul 8, 2026 · Assigned by Foxit

Description

When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit PDF Editor Versions 2026.1.1 and earlier, Versions 14.0.4 and earlier, Versions 13.2.4 and earlier, Versions 2026.1.1 and earlier, Versions 14.0.3 and earlier, Versions 13.2.3 and earlier —
Foxit Software Foxit PDF Reader Versions 2026.1.1 and earlier —

Advisories 1

References