AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

FoxitCVE-2026-91794

Foxit PDF: out-of-bounds write

Foxit

CVE-2026-91794 · Published Sep 23, 2026 · updated Oct 29, 2026

High7.8
No fix yet
Foxit advisory

An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malformed color space data, which may cause the program to crash and potentially lead to remote code execution.

Affected versions

PackageAffectedFixed in
Foxit PDF Editor
Product
<= Versions 2026.2 and earlierNo fix yet
<= Versions 14.0.7 and earlierNo fix yet
<= Versions 13.2.6 and earlierNo fix yet
Foxit PDF Reader
Product
<= Versions 2026.2 and earlierNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-787

More Foxit advisories

All Foxit
Medium 6.1Sep 23Foxit PDF: out-of-bounds readCVE-2026-91817no fix yetHigh 7.8Sep 23Foxit PDF: use after freeCVE-2026-91818no fix yetHigh 7.8Sep 23Foxit PDF: use after freeCVE-2026-91809no fix yetMedium 6.1Sep 23Foxit PDF: out-of-bounds readCVE-2026-91810no fix yetHigh 7.8Sep 23Foxit PDF: out-of-bounds writeCVE-2026-91811no fix yetHigh 7.9Sep 23Foxit PDF: code executionCVE-2026-91812no fix yet