Yüksek CVSS 7.8
CVE-2026-91791: Pdf Editor: serbest bırakılmış belleğin kullanımı
Açıklama (NVD)
When processing a specially crafted PDF file, Foxit PDF Editor/Reader may encounter a reentrant execution condition involving JavaScript triggered by page-visibility events. This can cause the application to access a released page-view object while calculating annotation boundaries, resulting in an invalid memory read and application crash.
Özet bilgiler
- Ürün
- Foxit Pdf Editor
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,19 (yüzdelik 8)
- CWE
- CWE-416
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| foxit-pdf-editor | — | 13.2.5.63482 | — |
| foxit-pdf-editor | 14.0.0.33046 | 14.0.7.33751 | — |
| foxit-pdf-editor | 2023.1.0.15510 | 2023.3.0.23028 | — |
| foxit-pdf-editor | 2024.1.0.23997 | 2024.4.1.27687 | — |
| foxit-pdf-editor | 2025.1.0.27937 | 2025.3.0.35737 | — |
| foxit-pdf-editor | 2026.1.0.36452 | 2026.2.0.39747 | — |
| foxit-pdf-reader | — | 2026.2.0.39747 | — |