CVE-2026-57258CWE-125
Foxit PDF Editor/Reader Crash via Malformed PRC 3D Stream
Medium · published July 8, 2026
What it is
The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads them, leading to out-of-bounds reads and application crashes.
The record
Technical detail
- CVSS v3.1
- 6.1 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00160 · 4.8th percentile
- Weakness
- CWE-125 · Out-of-bounds Read
- Published
- 2026-07-08T07:35Z
EPSS history
Timeline