7.8Yüksek
CVE-2026-91794Foxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability
Açıklama
An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malformed color space data, which may cause the program to crash and potentially lead to remote code execution.
Zayıflık türü (CWE):
CWE-787
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Foxit Software Inc. | Foxit PDF Editor | Versions 2026.2 and earlier, Versions 14.0.7 and earlier, Versions 13.2.6 and earlier | |
| Foxit Software Inc. | Foxit PDF Reader | Versions 2026.2 and earlier | |
| foxit | pdf editor | ≤ 13.2.6.24111 | |
| foxit | pdf reader | ≤ 2026.2.0.39747 |
Kaynaklar ve yamalar
- https://www.foxit.com/support/security-bulletins.html Vendor Advisory
CPE eşleşmeleri (NVD) (14)
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≤ 13.2.6.24111cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 14.0.0.33046 ≤ 14.0.7.33751cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2023.1.0.15510 ≤ 2023.3.0.23028cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2024.1.0.23997 ≤ 2024.4.1.27687cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2025.1.0.27937 ≤ 2025.3.0.35737cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2026.1.0.36452 ≤ 2026.2.0.39747cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*≤ 2026.2.0.39747cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≤ 13.2.6.63484cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 14.0.0.68868 ≤ 14.0.7.69441cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2023.1.0.55583 ≤ 2023.3.0.63083cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2024.1.0.63682 ≤ 2024.4.1.66479cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2025.1.0.66692 ≤ 2025.3.0.69570cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*≥ 2026.1.0.70169 ≤ 2026.2.0.72029cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*≤ 2026.2.0.72029