7.8

CVE-2026-57251

Foxit PDF Editor/Reader Cloud Appearance Buffer Overflow Vulnerability

The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bounds access to the underlying array is exposed, ultimately leading to a crash of the application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
FoxitPdf Editor Version <= 13.2.4.24048
   MicrosoftWindows Version-
FoxitPdf Editor Version >= 14.0.0.33046 <= 14.0.4.33508
   MicrosoftWindows Version-
FoxitPdf Editor Version >= 2023.1.0.15510 <= 2023.3.0.23028
   MicrosoftWindows Version-
FoxitPdf Editor Version >= 2024.1.0.23997 <= 2024.4.1.27687
   MicrosoftWindows Version-
FoxitPdf Editor Version >= 2025.1.0.27937 <= 2025.3.0.35737
   MicrosoftWindows Version-
FoxitPdf Editor Version >= 2026.1.0.36452 <= 2026.1.1.36485
   MicrosoftWindows Version-
FoxitPdf Reader Version <= 2026.1.1.36485
   MicrosoftWindows Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.019
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
14984358-7092-470d-8f34-ade47a7658a2 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://www.foxit.com/support/security-bulletins.html
Vendor Advisory