CVE-2026-91794
EUVD-2026-8512823.09.2026, 08:17
An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malformed color space data, which may cause the program to crash and potentially lead to remote code execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| foxit | pdf_editor | 𝑥 ≤ 13.2.6.24111 |
| foxit | pdf_editor | 14.0.0.33046 ≤ 𝑥 ≤ 14.0.7.33751 |
| foxit | pdf_editor | 2023.1.0.15510 ≤ 𝑥 ≤ 2023.3.0.23028 |
| foxit | pdf_editor | 2024.1.0.23997 ≤ 𝑥 ≤ 2024.4.1.27687 |
| foxit | pdf_editor | 2025.1.0.27937 ≤ 𝑥 ≤ 2025.3.0.35737 |
| foxit | pdf_editor | 2026.1.0.36452 ≤ 𝑥 ≤ 2026.2.0.39747 |
| foxit | pdf_reader | 𝑥 ≤ 2026.2.0.39747 |
| foxit | pdf_editor | 𝑥 ≤ 13.2.6.63484 |
| foxit | pdf_editor | 14.0.0.68868 ≤ 𝑥 ≤ 14.0.7.69441 |
| foxit | pdf_editor | 2023.1.0.55583 ≤ 𝑥 ≤ 2023.3.0.63083 |
| foxit | pdf_editor | 2024.1.0.63682 ≤ 𝑥 ≤ 2024.4.1.66479 |
| foxit | pdf_editor | 2025.1.0.66692 ≤ 𝑥 ≤ 2025.3.0.69570 |
| foxit | pdf_editor | 2026.1.0.70169 ≤ 𝑥 ≤ 2026.2.0.72029 |
| foxit | pdf_reader | 𝑥 ≤ 2026.2.0.72029 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration