CVE-2026-91808

6.1 Moyenne

Publiée le 23/09/2026 à 10:17 · Modifiée le 08/10/2026 à 15:53 · Analysée par le NVD · Source : 14984358-7092-470d-8f34-ade47a7658a2

Description

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an application crash.

Traduire en français

Produits concernés

Foxit Software Inc. Foxit PDF Editor
Foxit Software Inc. Foxit PDF Reader
Foxit pdf editor
Foxit pdf reader

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.1 Moyenne	14984358-7092-470d-8f34-ade47a7658a2	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H`

Faiblesses (CWE)

CWE-125

Références

https://www.foxit.com/support/security-bulletins.html Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories