← CVE Intelligence

CVE-2026-57250

Foxit PDF Editor/Reader Form Field Use-After-Free Vulnerability PUBLISHED

Description (CNA)

When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing.

Affected (CNA)

Vendor / productVersions
Foxit Software Inc. / Foxit PDF Editoraffected Versions 2026.1.1 and earlier; affected Versions 14.0.4 and earlier; affected Versions 13.2.4 and earlier
Foxit Software Inc. / Foxit PDF Editoraffected Versions 2026.1.1 and earlier; affected Versions 14.0.3 and earlier; affected Versions 13.2.3 and earlier
Foxit Software Inc. / Foxit PDF Readeraffected Versions 2026.1.1 and earlier

CWE

CWE-416

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.