CVE-2026-57244: Foxit PDF Editor/Reader Form Control Use-After-Free Vulnerability
After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-57244?
CVE-2026-57244 is classified with a high severity score of 7.8.
How do I fix CVE-2026-57244?
To mitigate CVE-2026-57244, users should update to the latest version of Foxit PDF Editor or Reader where the vulnerability has been addressed.
What platforms are affected by CVE-2026-57244?
CVE-2026-57244 affects Foxit PDF Editor and Foxit PDF Reader on all supported platforms.
What are the potential impacts of CVE-2026-57244?
The impact of CVE-2026-57244 includes application crashes and potential denial of service due to use-after-free vulnerabilities.
How does CVE-2026-57244 occur?
CVE-2026-57244 occurs when JavaScript resets a form, leading to a failure in pointer dereferencing during object traversal.