CVE-2026-91794CWE-787

CVE-2026-91794

High · published September 23, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malformed color space data, which may cause the program to crash and potentially lead to remote code execution.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-09-23T12:17Z
References (1)
https://www.foxit.com/support/security-bulletins.html · 14984358-7092-470d-8f34-ade47a7658a2
EPSS history
Timeline
  • 24 SEP 03:25Z
    EPSS moved — → 0%
    epss
  • 23 SEP 07:51Z
    Foxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability
    cvelistv5