CVE-2026-91817: Foxit PDF Editor/Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability
Published Sep 23, 2026
·Updated
A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor/Reader’s handling of wide strings in embedded PDF JavaScript. Insufficient validation of string-deletion ranges can cause an integer underflow, resulting in an out-of-bounds read and application crash.
Affected Software
8 affected components
Foxit PDF Editor/Reader
Foxit PDF Editor<=13.2.5.63482
Foxit PDF Editor>=14.0.0.33046<=14.0.7.33751
Foxit PDF Editor>=2023.1.0.15510<=2023.3.0.23028
Foxit PDF Editor>=2024.1.0.23997<=2024.4.1.27687
Foxit PDF Editor>=2025.1.0.27937<=2025.3.0.35737
Foxit PDF Editor>=2026.1.0.36452<=2026.2.0.39747
Foxit PDF Reader<=2026.2.0.39747
Event History
Sep 23, 2026
CVE Published
via MITRE·07:49 AM
Data Sourced
via MITRE·07:49 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The supplied metrics indicate no privileges are required, but user interaction is required. The attack vector is local, and the malformed content is embedded PDF JavaScript using wide-string deletion ranges.
2
What impact is indicated if exploitation succeeds?
The vulnerability can cause an out-of-bounds read and crash the affected application. The supplied severity vector indicates low confidentiality impact and high availability impact.