CVE-2026-57249: Foxit PDF Editor/Reader Annotation Use-After-Free Vulnerability
Published Jul 8, 2026
·Updated
After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the re-entry process, the application access invalid objects and crashed.
Affected Software
9 affected components
Foxit Foxit PDF Editor/Reader
All of the following
Any of the following
Foxit PDF Editor<=13.2.4.24048
Foxit PDF Editor>=14.0.0.33046<=14.0.4.33508
Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028
Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687
Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737
Foxit PDF Editor>=2026.1.0.36452<=2026.1.1.36485
Foxit PDF Reader<=2026.1.1.36485
Microsoft Windows
Event History
Jul 8, 2026
CVE Published
via MITRE·07:36 AM
Data Sourced
via MITRE·07:36 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-57249?
The severity of CVE-2026-57249 is high with a score of 7.8.
2
How do I fix CVE-2026-57249?
To fix CVE-2026-57249, update your Foxit PDF Editor or Reader to the latest version available.
3
What kind of vulnerability is CVE-2026-57249?
CVE-2026-57249 is a Use-After-Free vulnerability that can lead to application crashes.
4
Which software is affected by CVE-2026-57249?
CVE-2026-57249 affects the Foxit PDF Editor and Foxit PDF Reader applications.
5
What is the impact of CVE-2026-57249?
The impact of CVE-2026-57249 includes potential crashes and access to invalid objects in the application.