CVE-2026-57253CWE-125

Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Medium · published July 8, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used, resulting in the application crashing.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-07-08T07:36Z
EPSS history
Timeline
  • 08 JUL 07:36Z
    Foxit PDF Editor/Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
    cvelistv5