References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

Change History

{"timestamp":"2026-07-08T12:40:43.424088Z","id":"CVE-2026-57251","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bounds access to the underlying array is exposed, ultimately leading to a crash of the application.

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-129

https://www.foxit.com/support/security-bulletins.html

[{"vendor":"Foxit Software Inc.","product":"Foxit PDF Editor","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"Versions 2026.1.1 and earlier","status":"affected"},{"version":"Versions 14.0.4 and earlier","status":"affected"},{"version":"Versions 13.2.4 and earlier","status":"affected"}]},{"vendor":"Foxit Software Inc.","product":"Foxit PDF Reader","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"Versions 2026.1.1 and earlier","status":"affected"}]}]