← CVE Intelligence

CVE-2026-57244

Foxit PDF Editor/Reader Form Control Use-After-Free Vulnerability PUBLISHED

Description (CNA)

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash.

Affected (CNA)

Vendor / productVersions
Foxit Software Inc. / Foxit PDF Editoraffected Versions 2026.1.1 and earlier; affected Versions 14.0.4 and earlier; affected Versions 13.2.4 and earlier
Foxit Software Inc. / Foxit PDF Editoraffected Versions 2026.1.1 and earlier; affected Versions 14.0.3 and earlier; affected Versions 13.2.3 and earlier
Foxit Software Inc. / Foxit PDF Readeraffected Versions 2026.1.1 and earlier

CWE

CWE-416

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.