Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-5938 EUVD-2026-25824GHSA-7r3x-9grv-cr95

Foxit PDF Editor/Reader Infinite Loop Denial-of-Service Vulnerability

Published Apr 27, 2026 · Updated Apr 27, 2026 · Assigned by Foxit

Description

Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit PDF Editor Versions 2026.1 and earlier, Versions 14.0.3 and earlier, Versions 13.2.3 and earlier —
Foxit Software Foxit PDF Reader Versions 2026.1 and earlier —

Advisories 1

References