CVE-2026-91790 PUBLISHED

Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability

Assigner: Foxit
Reserved: 15.09.2026 Published: 23.09.2026 Updated: 23.09.2026

When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor Foxit Software Inc.
Product Foxit PDF Editor
Versions Default: unaffected
  • Version Versions 2026.2 and earlier is affected
  • Version Versions 14.0.7 and earlier is affected
  • Version Versions 13.2.6 and earlier is affected
Vendor Foxit Software Inc.
Product Foxit PDF Reader
Versions Default: unaffected
  • Version Versions 2026.2 and earlier is affected

Credits

  • Anonymous working with TrendAI Zero Day Initiative finder

References

Problem Types

  • CWE-416 Use after free CWE

Impacts

  • Potential arbitrary code execution