CVE-2026-91794: Foxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability
Published Sep 23, 2026
·Updated
An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malformed color space data, which may cause the program to crash and potentially lead to remote code execution.
Affected Software
17 affected components
Foxit PDF Editor/Reader
All of the following
Any of the following
Foxit PDF Editor<=13.2.6.24111
Foxit PDF Editor>=14.0.0.33046<=14.0.7.33751
Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028
Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687
Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737
Foxit PDF Editor>=2026.1.0.36452<=2026.2.0.39747
Foxit PDF Reader<=2026.2.0.39747
Microsoft Windows
All of the following
Any of the following
Foxit PDF Editor<=13.2.6.63484
Foxit PDF Editor>=14.0.0.68868<=14.0.7.69441
Foxit PDF Editor>=2023.1.0.55583<=2023.3.0.63083
Foxit PDF Editor>=2024.1.0.63682<=2024.4.1.66479
Foxit PDF Editor>=2025.1.0.66692<=2025.3.0.69570
Foxit PDF Editor>=2026.1.0.70169<=2026.2.0.72029
Foxit PDF Reader<=2026.2.0.72029
Apple macOS
Event History
Sep 23, 2026
CVE Published
via MITRE·07:51 AM
Data Sourced
via MITRE·07:51 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What does an attacker need to do to exploit this vulnerability?
An attacker would need to convince a user to open or render a malicious PDF containing malformed DeviceN color space data. The CVSS vector indicates local attack vector, no privileges required, and user interaction required.
2
What is the potential impact if exploitation succeeds?
The malformed PDF can cause Foxit PDF Editor/Reader to crash and may allow remote code execution. The listed severity vector rates confidentiality, integrity, and availability impact as high.