← CVE Intelligence

CVE-2026-57256

Foxit Editor/Reader List Box Format Use-After-Free Vulnerability PUBLISHED

Description (CNA)

When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, and this operation is repeated after the form is reset. During this process, the application failed to adequately verify the validity of the form objects and their internal dictionary pointers, resulting in accessing internal members of invalid or improperly initialized fields. This led to an illegal pointer read, ultimately causing the application to crash.

Affected (CNA)

Vendor / productVersions
Foxit Software Inc. / Foxit PDF Editoraffected Versions 2026.1.1 and earlier; affected Versions 14.0.4 and earlier; affected Versions 13.2.4 and earlier
Foxit Software Inc. / Foxit PDF Editoraffected Versions 2026.1.1 and earlier; affected Versions 14.0.3 and earlier
Foxit Software Inc. / Foxit PDF Readeraffected Versions 2026.1.1 and earlier

CWE

CWE-416

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.