Skip to content
OpenAdvisories
High · 7.8 CVE-2026-5943 EUVD-2026-25829GHSA-8hgx-6h8v-fcg8

Foxit PDF Editor/Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability

Published Apr 27, 2026 · Updated Apr 28, 2026 · Assigned by Foxit

Description

Document structural anomalies caused inconsistencies between page element relationships and internal index states. When scripts triggered document modifications, object reference validity was not properly maintained, leading to a crash when accessing an invalid pointer during page information queries.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit PDF Editor Versions 2026.1 and earlier, Versions 14.0.3 and earlier, Versions 13.2.3 and earlier —
Foxit Software Foxit PDF Reader Versions 2026.1 and earlier —

Advisories 1

References