CVE-2026-91791

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader (affected versions not specified)

Description A use-after-free condition exists when processing specially crafted PDF files. The issue occurs due to a reentrant execution condition involving JavaScript triggered by page-visibility events, which causes the application to access a released page-view object while calculating annotation boundaries. This leads to an invalid memory read and can result in an application crash or remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.