← CVE Intelligence

CVE-2026-57258

Foxit PDF Editor/Reader Crash via Malformed PRC 3D Stream PUBLISHED

Description (CNA)

The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads them, leading to out-of-bounds reads and application crashes.

Affected (CNA)

Vendor / productVersions
Foxit Software Inc. / Foxit PDF Editoraffected Versions 2026.1.1 and earlier; affected Versions 14.0.4 and earlier; affected Versions 13.2.4 and earlier
Foxit Software Inc. / Foxit PDF Editoraffected Versions 2026.1.1 and earlier; affected Versions 14.0.3 and earlier; affected Versions 13.2.3 and earlier
Foxit Software Inc. / Foxit PDF Readeraffected Versions 2026.1.1 and earlier

CWE

CWE-125

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.