A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted PDF files. Insufficient validation of the appearance geometry can result in memory corruption and application crashes.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.foxit.com/support/security-bulletins.html |
|
History
Wed, 23 Sep 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted PDF files. Insufficient validation of the appearance geometry can result in memory corruption and application crashes. | |
| Title | Foxit PDF Editor/Reader Out-of-bounds Write Vulnerability While Rendering | |
| Weaknesses | CWE-787 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Foxit
Published:
Updated: 2026-09-23T07:50:34.432Z
Reserved: 2026-09-15T07:34:43.393Z
Link: CVE-2026-91804
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-09-23T08:17:12.477
Modified: 2026-09-23T08:17:12.477
Link: CVE-2026-91804
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses