Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.foxit.com/support/security-bulletins.html |
|
History
Wed, 23 Sep 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution. | |
| Title | Foxit PDF Editor/Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability | |
| Weaknesses | CWE-822 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Foxit
Published:
Updated: 2026-09-23T07:51:06.870Z
Reserved: 2026-09-15T07:34:40.287Z
Link: CVE-2026-91795
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-09-23T08:17:11.453
Modified: 2026-09-23T08:17:11.453
Link: CVE-2026-91795
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses