Out-of-Bounds Read Vulnerability in Foxit PDF Reader
CVE-2026-57255

6.1MEDIUM

Key Information:

Vendor: Foxit Inc.
Status: Foxit PDF Editor; Foxit
Vendor: CVE Published:; 8 July 2026

What is CVE-2026-57255?

A vulnerability exists in Foxit PDF Reader where a malformed function associated with an abnormal color space can lead to an out-of-bounds access. Specifically, the application fails to validate the function's output, resulting in an illegal pointer dereference. This can cause the application to crash, posing risks to user data and overall system stability.

Affected Version(s)

Foxit PDF Editor Windows Versions 2026.1.1 and earlier

Foxit PDF Editor Windows Versions 14.0.4 and earlier

Foxit PDF Editor Windows Versions 13.2.4 and earlier

References

https://www.foxit.com/support/security-bulletins.html

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 8, 2026
Vulnerability Reserved
Jun 24, 2026

Credit

Liang Zhu

CVE-2026-57255 Data

JSON