CVE-2026-57251
Received Received - Intake

Buffer Overflow in PDF Viewer Application

Publication date: 2026-07-08

Last updated on: 2026-07-08

Assigner: Foxit

Description
The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bounds access to the underlying array is exposed, ultimately leading to a crash of the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-08
Last Modified
2026-07-08
Generated
2026-07-08
AI Q&A
2026-07-08
EPSS Evaluated
N/A
NVD
CVE-2026-57251
EUVD
EUVD-2026-42203

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-129 The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability occurs when the application opens a PDF file and processes a construction step that visually appears cloud-like. The issue is that the process does not properly set an upper limit or perform consistency checks on the data structure involved.

As a result, there is an out-of-bounds access to an underlying array, which means the application tries to read or write data outside the valid range of the array.

This improper access ultimately causes the application to crash.

Impact Analysis

The vulnerability can lead to a crash of the application when it processes certain PDF files.

This crash can cause denial of service, interrupting normal operations and potentially leading to loss of availability.

Given the CVSS score of 7.8 with high impact on confidentiality, integrity, and availability, the vulnerability might also be exploitable to cause more severe impacts, although the description primarily mentions a crash.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57251. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart