Use-After-Free Vulnerability in Foxit PDF Reader Software

CVE-2026-3777

What is CVE-2026-3777?

This vulnerability occurs when the application fails to accurately validate the lifetime and validity of internal view cache pointers after JavaScript modifies the document's zoom and page state. In scenarios where scripts alter the zoom property and subsequently trigger a page change, it is possible for the original view object to be destroyed while stale pointers remain. If these pointers are later dereferenced with specially crafted JavaScript and document structures, it can result in a use-after-free condition, potentially allowing an attacker to execute arbitrary code.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References