PT-2026-97208 · Foxit · Foxit Pdf Reader+1

CVE-2026-91789

·

Published

2026-09-23

·

Updated

2026-09-23

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader (affected versions not specified)
Description The U3D/GIF texture decoding path contains insufficient validation of image dimensions and related size information. This flaw can lead to an integer overflow, resulting in an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, which may allow remote code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-91789
ZDI-26-721

Affected Products

Foxit Pdf Editor
Foxit Pdf Reader