CVE-2026-91817Medium· 6.1▾ SunlitA heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 23.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
Last analysed / modified upstream
A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash.
pdf_editor <= 13.2.5.63482pdf_editor >= 14.0.0.33046, <= 14.0.7.33751pdf_editor >= 2023.1.0.15510, <= 2023.3.0.23028pdf_editor >= 2024.1.0.23997, <= 2024.4.1.27687pdf_editor >= 2025.1.0.27937, <= 2025.3.0.35737pdf_editor >= 2026.1.0.36452, <= 2026.2.0.39747pdf_reader <= 2026.2.0.39747Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-91810Medium· 6.1A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks
CVE-2026-91808Medium· 6.1A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata
CVE-2026-91807Medium· 6.1A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed image soft-mask data
CVE-2025-55307Low· 3.3An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2
CVE-2026-91818High· 7.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations
CVE-2026-91815High· 7.8Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap buffer during decoding, potentially causing the program to crash and introduc…