PT-2026-56344 · Foxit · Foxit Pdf Reader+1

Xupeng · Published 2026-07-08 · Updated 2026-07-08 · CVE-2026-57245

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader (affected versions not specified)

Description When opening a PDF, the application fails to validate abnormal annotation relationships and field combinations while traversing and building annotation elements related to hyperlinks. This causes internal objects to enter an invalid state, leading to an invalid pointer write during the destruction phase, which results in an application crash. This is a use-after-free issue, which occurs when a program continues to use a pointer after it has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-57245

Affected Products

Foxit Pdf Editor

Foxit Pdf Reader

References · 4

• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-57245 · Security Note
• https://t.me/cveNotify/190918 · Telegram Post
• https://t.me/CVEtracker/59345 · Telegram Post