Skip to content
OpenAdvisories
High · 7.8 CVE-2026-57260 EUVD-2026-42189GHSA-95qp-ggjq-pxh6

Security vulnerability in Foxit PDF Editor/Reader — U3D Adobe Mesh Decompression (Type Confusion / Invalid Pointer Dereference)

Published Jul 8, 2026 · Updated Jul 8, 2026 · Assigned by Foxit

Vendor: Foxit Product: Foxit PDF Reader Product: foxit_pdf_editor

Description

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit PDF Editor Versions 2026.1.1 and earlier, Versions 14.0.4 and earlier, Versions 13.2.4 and earlier, Versions 2026.1.1 and earlier, Versions 14.0.3 and earlier, Versions 13.2.3 and earlier —
Foxit Software Foxit PDF Reader Versions 2026.1.1 and earlier —

Advisories 1

References