CVE-2026-91789: Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Q: What must an attacker do to exploit this issue?

An attacker would need to provide a crafted file that reaches the U3D/GIF texture decoding path. Because user interaction is required, a victim would need to open or otherwise process the malicious content.

Q: What is the likely impact if exploitation succeeds?

The out-of-bounds write during pixel processing could potentially allow remote code execution. The supplied severity vector indicates high impacts to confidentiality, integrity, and availability.

Published Sep 23, 2026

Updated

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially resulting in remote code execution.

Affected Software

9 affected components

Foxit PDF Editor/Reader

All of the following

Any of the following

Foxit PDF Editor<=13.2.5.63482

Foxit PDF Editor>=14.0.0.33046<=14.0.7.33751

Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028

Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687

Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737

Foxit PDF Editor>=2026.1.0.36452<=2026.2.0.39747

Foxit PDF Reader<=2026.2.0.39747

Microsoft Windows

Event History

Sep 23, 2026

CVE Published

via MITRE·07:49 AM

Data Sourced

via MITRE·07:49 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:17 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What must an attacker do to exploit this issue?

An attacker would need to provide a crafted file that reaches the U3D/GIF texture decoding path. Because user interaction is required, a victim would need to open or otherwise process the malicious content.

What is the likely impact if exploitation succeeds?