CVE-2026-91804: Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Rendering
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted PDF files. Insufficient validation of the appearance geometry can result in memory corruption and application crashes.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must provide a specially crafted PDF containing a Circle annotation with a malformed Cloudy appearance stream and persuade a user to render it in Foxit PDF Editor or Reader. The user interaction requirement means exploitation depends on the target opening or otherwise rendering the malicious file.
What is the likely impact if exploitation succeeds?
Malformed appearance geometry can trigger a heap-based out-of-bounds write, causing memory corruption and application crashes. The listed severity vector indicates potential impacts to confidentiality, integrity, and availability.