Description
A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Foxit Software | Foxit PDF Editor | Versions 2026.2 and earlier, Versions 14.0.7 and earlier, Versions 13.2.6 and earlier | — |
| Foxit Software | Foxit PDF Reader | Versions 2026.2 and earlier | — |
Advisories 1
- WID-SEC-2026-3525 Foxit PDF Reader und Foxit PDF Editor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 23, 2026