CVE-2026-57254: Foxit PDF Editor/Reader Annotation Type Confusion Vulnerability
Published Jul 8, 2026
·Updated
There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.
Affected Software
9 affected components
Foxit Foxit PDF Editor/Reader
All of the following
Any of the following
Foxit PDF Editor<=13.2.4.24048
Foxit PDF Editor>=14.0.0.33046<=14.0.4.33508
Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028
Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687
Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737
Foxit PDF Editor>=2026.1.0.36452<=2026.1.1.36485
Foxit PDF Reader<=2026.1.1.36485
Microsoft Windows
Event History
Jul 8, 2026
CVE Published
via MITRE·07:36 AM
Data Sourced
via MITRE·07:36 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-57254?
CVE-2026-57254 has a severity rating of high with a score of 7.8.
2
How do I fix CVE-2026-57254?
To mitigate CVE-2026-57254, update your Foxit PDF Editor or Reader to the latest version available from the official website.
3
What impact does CVE-2026-57254 have on my system?
CVE-2026-57254 can cause the Foxit PDF Editor or Reader application to crash due to improper type checking of PDF annotations.
4
Which software is affected by CVE-2026-57254?
CVE-2026-57254 affects Foxit PDF Editor, Foxit PDF Editor/Reader, and Foxit PDF Reader.
5
Is CVE-2026-57254 exploitable remotely?
Yes, CVE-2026-57254 is considered exploitable with low attack complexity and requires user interaction to trigger.