CVE-2026-57245: Foxit PDF Editor/Reader Signature Hyperlink Use-After-Free Vulnerability
Published Jul 8, 2026
·Updated
When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationships and field combinations. This results in the internal objects entering an invalid state. Eventually, during the destruction phase, an invalid pointer write occurred, causing the application to crash.
Affected Software
9 affected components
Foxit PDF Editor/Reader
All of the following
Any of the following
Foxit PDF Editor<=13.2.4.24048
Foxit PDF Editor>=14.0.0.33046<=14.0.4.33508
Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028
Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687
Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737
Foxit PDF Editor>=2026.1.0.36452<=2026.1.1.36485
Foxit PDF Reader<=2026.1.1.36485
Microsoft Windows
Event History
Jul 8, 2026
CVE Published
via MITRE·07:36 AM
Data Sourced
via MITRE·07:36 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-57245?
CVE-2026-57245 has a high severity rating of 7.8.
2
How do I fix CVE-2026-57245?
To fix CVE-2026-57245, update your Foxit PDF Editor or Reader to the latest version provided by Foxit.
3
What software is affected by CVE-2026-57245?
CVE-2026-57245 affects Foxit PDF Editor and Foxit PDF Reader.
4
What type of vulnerability is CVE-2026-57245?
CVE-2026-57245 is a use-after-free vulnerability that affects hyperlink annotations in PDF files.
5
What are the potential impacts of CVE-2026-57245?
CVE-2026-57245 can lead to crashes or arbitrary code execution if exploited.