Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-57258 EUVD-2026-42190GHSA-x6hw-8x39-wcwp

Foxit PDF Editor/Reader Crash via Malformed PRC 3D Stream

Published Jul 8, 2026 · Updated Jul 8, 2026 · Assigned by Foxit

Description

The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads them, leading to out-of-bounds reads and application crashes.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit PDF Editor Versions 2026.1.1 and earlier, Versions 14.0.4 and earlier, Versions 13.2.4 and earlier, Versions 2026.1.1 and earlier, Versions 14.0.3 and earlier, Versions 13.2.3 and earlier —
Foxit Software Foxit PDF Reader Versions 2026.1.1 and earlier —

Advisories 1

References