CVE-2026-91790: Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Published Sep 23, 2026
·Updated
When rendering the page image, Foxit PDF Editor/Reader fails to perform validation on image objects whose optional content attributes are malformed. As a result, the program may access an already-freed internal data structure, triggering a crash due to UAF.
Affected Software
1 affected component
Foxit PDF Editor/Reader
Event History
Sep 23, 2026
CVE Published
via MITRE·07:51 AM
Data Sourced
via MITRE·07:51 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require elevated privileges or user interaction?
The vector is local and requires no privileges, but user interaction is required. The vulnerable code path is reached when a page image is rendered.
2
What kind of file content is needed to trigger the issue?
The affected image object must have malformed optional-content attributes. This can cause the application to access an internal data structure after it has been freed and crash.