CVE-2026-91794
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
41/100
Published: 2026-09-23
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Auth
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
Required
S:
Unchanged
C:
High
I:
High
A:
High
Description
An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malformed color space data, which may cause the program to crash and potentially lead to remote code execution.
Weakness Classification (1)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| foxit | pdf_editor | < 13.2.6.24111 |
| foxit | pdf_reader | < 2026.2.0.39747 |
References & Advisories (1)
Vendor Advisory