CVE-2026-57256

Name of the Vulnerable Software and Affected Versions Foxit Editor/Reader (affected versions not specified)

Description When the application opens a PDF and executes JavaScript, it performs abnormal operations on the list box field, which are repeated after the form is reset. The application fails to adequately verify the validity of form objects and their internal dictionary pointers, leading to the access of internal members of invalid or improperly initialized fields. This results in an illegal pointer read, causing the application to crash. This is a Use-After-Free issue, which occurs when a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.