CVE-2026-57255CWE-125

Security vulnerability in Foxit PDF Editor/Reader — OOB Read via NaN-Bypass Clamp

Medium · published July 8, 2026

CVSS v3.1
6.1
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

The application opens a PDF containing an abnormal color space whose attributes reference a valid but semantically malformed function. The function's output is not validated; when subsequently read, it produces an illegal pointer that accesses an out-of-bounds region, crashing the application.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-07-08T07:36Z
EPSS history
Timeline
  • 08 JUL 07:36Z
    Security vulnerability in Foxit PDF Editor/Reader — OOB Read via NaN-Bypass Clamp
    cvelistv5