---
id: CVE-2026-91808
title: >-
  A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor
  Reader’s handling of PDF image objects with inconsistent compression metadata
summary: >-
  A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor
  Reader’s handling of PDF image objects with inconsistent compression metadata.
  Insufficient validation during image decoding may result in an undersized
  buffer and …
severity: medium
cvss: 6.1
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H'
cwe:
  - CWE-125
vendor: foxit
product: pdf_editor
affected:
  - pdf_editor <= 13.2.5.63482
  - 'pdf_editor >= 14.0.0.33046, <= 14.0.7.33751'
  - 'pdf_editor >= 2023.1.0.15510, <= 2023.3.0.23028'
  - 'pdf_editor >= 2024.1.0.23997, <= 2024.4.1.27687'
  - 'pdf_editor >= 2025.1.0.27937, <= 2025.3.0.35737'
  - 'pdf_editor >= 2026.1.0.36452, <= 2026.2.0.39747'
  - pdf_reader <= 2026.2.0.39747
published: '2026-09-23'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T13:53:24.190'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-91808'
references:
  - url: 'https://www.foxit.com/support/security-bulletins.html'
    label: 14984358-7092-470d-8f34-ade47a7658a2
tags:
  - nvd
  - cve.org
epss: 0.00153
epssPercentile: 0.04371
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-23T15:25:57.837671Z'
ingestedAt: '2026-09-23T08:20:37.593Z'
---

## Overview

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an application crash.

## Affected

- `pdf_editor <= 13.2.5.63482`
- `pdf_editor >= 14.0.0.33046, <= 14.0.7.33751`
- `pdf_editor >= 2023.1.0.15510, <= 2023.3.0.23028`
- `pdf_editor >= 2024.1.0.23997, <= 2024.4.1.27687`
- `pdf_editor >= 2025.1.0.27937, <= 2025.3.0.35737`
- `pdf_editor >= 2026.1.0.36452, <= 2026.2.0.39747`
- `pdf_reader <= 2026.2.0.39747`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.