← Back

CVE-2026-57260

nvd nist
Published: Jul 8, 2026Modified: Jul 9, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: 14984358-7092-470d-8f34-ade47a7658a2 (Secondary)

Description

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash.

Affected (14)

Foxit
2 products
Pdf Editor
Pdf Reader
Configuration A
7 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Foxit
Pdf Editor
version ≤ 13.2.4.24048
Pdf Editor
14.0.0.33046 ≤ version ≤ 14.0.4.33508
Pdf Editor
2023.1.0.15510 ≤ version ≤ 2023.3.0.23028
Pdf Editor
2024.1.0.23997 ≤ version ≤ 2024.4.1.27687
Pdf Editor
2025.1.0.27937 ≤ version ≤ 2025.3.0.35737
Pdf Editor
2026.1.0.36452 ≤ version ≤ 2026.1.1.36485
Pdf Reader
version ≤ 2026.1.1.36485
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
7 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Foxit
Pdf Editor
version ≤ 13.2.3.63444
Pdf Editor
14.0.0.68868 ≤ version ≤ 14.0.3.69295
Pdf Editor
2023.1.0.55583 ≤ version ≤ 2023.3.0.63083
Pdf Editor
2024.1.0.63682 ≤ version ≤ 2024.4.1.66479
Pdf Editor
2025.1.0.66692 ≤ version ≤ 2025.3.0.69570
Pdf Editor
2026.1.0.70169 ≤ version ≤ 2026.1.1.70276
Pdf Reader
version ≤ 2026.1.1.70276
Running on/withPlatform Versions
Apple
Macos
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

Source: 14984358-7092-470d-8f34-ade47a7658a2
Vendor Advisory

Timeline

No history available yet.