Out-of-bounds Access Vulnerability in PDF Reader Software by Foxit
CVE-2026-57241

6.1MEDIUM

Key Information:

Vendor: Foxit Inc.
Status: Foxit PDF Editor; Foxit
Vendor: CVE Published:; 8 July 2026

What is CVE-2026-57241?

An out-of-bounds access vulnerability exists in Foxit's PDF Reader software where the application mishandles page-related objects during JavaScript operations. This flaw leads to a failure in synchronization, allowing the renderer to rely on outdated information. When a user interacts with the PDF, it can result in application crashes due to improper access to memory, posing risks to data integrity and stability.

Affected Version(s)

Foxit PDF Editor Windows Versions 2026.1.1 and earlier

Foxit PDF Editor Windows Versions 14.0.4 and earlier

Foxit PDF Editor Windows Versions 13.2.4 and earlier

References

https://www.foxit.com/support/security-bulletins.html

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 8, 2026
Vulnerability Reserved
Jun 24, 2026

Credit

XuPeng

CVE-2026-57241 Data

JSON