Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-91789— Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability

Quick assessment

Affected
Foxit Software Inc. Foxit PDF Editor
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write

CVSS 7.8 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-91789

Vulnerability Information

Shenlong is analyzing...

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially resulting in remote code execution.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Foxit Software Inc. Foxit PDF Editor Versions 2026.2 and earlier -
Foxit Software Inc. Foxit PDF Reader Versions 2026.2 and earlier -

II. Public POCs for CVE-2026-91789

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-91789

请登录查看更多情报信息。

Same Patch Batch · Foxit Software Inc. · 2026-09-23 · 31 CVEs total

CVE-2026-91803 8.8 HIGH Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking
CVE-2026-91800 8.8 HIGH Foxit PDF Editor installer local privilege escalation
CVE-2026-91798 8.8 HIGH Foxit PDF Editor/Reader Updater Privilege Escalation
CVE-2026-91813 8.8 HIGH Foxit PDF Editor/Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerabili
CVE-2026-91812 7.9 HIGH Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escal
CVE-2026-91809 7.8 HIGH Foxit PDF Editor/Reader Annotation Use-After-Free Information Disclosure Vulnerability
CVE-2026-91811 7.8 HIGH Foxit PDF Editor/Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulne
CVE-2026-91804 7.8 HIGH Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Rendering
CVE-2026-91806 7.8 HIGH Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
CVE-2026-91801 7.8 HIGH Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution Vul
CVE-2026-91797 7.8 HIGH Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability
CVE-2026-91791 7.8 HIGH Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-91816 7.8 HIGH Foxit PDF Editor/Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
CVE-2026-91792 7.8 HIGH Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-91815 7.8 HIGH Foxit PDF Editor/Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerabi
CVE-2026-91818 7.8 HIGH Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-91794 7.8 HIGH Foxit PDF Editor/Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulne
CVE-2026-91790 7.8 HIGH Foxit PDF Editor/Reader Doc Object Use-After-Free Information Disclosure Vulnerability
CVE-2026-91799 7.8 HIGH Foxit Editor/Reader Array resetForm Use-After-Free Vulnerability
CVE-2026-91795 7.8 HIGH Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerabilit

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Foxit PDF Editor
Same vendor: Foxit Software Inc.
Same weakness: CWE-787

V. Comments for CVE-2026-91789

No comments yet

Leave a comment