CVE-2026-91808

MediumCVSS 6.1/10Last modified Oct 8, 2026

Description

A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an application crash.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
Foxit Software Inc.Foxit PDF EditorVersions 2026.2 and earlier; Versions 14.0.7 and earlier; Versions 13.2.6 and earlier
Foxit Software Inc.Foxit PDF ReaderVersions 2026.2 and earlier

References

Timeline

Published
Sep 23, 2026
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-918097.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF form fields. Improper validation during field-nCVE-2026-91817.5Esri ArcGIS Server contains a directory traversal vulnerability. ArcGIS Enterprise on Kubernetes is not impacted. An unauthenticated attackeCVE-2026-918106.1A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of malformed PDF image masks. Inconsistent image CVE-2026-918117.8A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indicCVE-2026-918128.1A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows man-in-the-middle attackers to bypass certificate validation and packagCVE-2026-918137.8A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows an update package to be replaced between download and high-privilege exCVE-2026-918145.5A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visibleCVE-2026-918157.8Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-boundCVE-2026-918167.8A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s handling of PDF annotations. Reentrant annotation deletion triggered by eCVE-2026-918176.1A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. InsufCVE-2026-918185.5A use-after-free vulnerability exists in Foxit PDF Editor/Reader’s JavaScript handling of PDF annotations. Reentrant page-event processing dCVE-2026-918196.9Affected versions of MISP rely on CakePHP request-method override processing in a way that can disable CSRF and form-security validation. C
CVE-2026-91808: Medium severity, CVSS 6.1 | Vulnix