CVE-2026-57251

Analyzed Analyzed - Analysis Complete

Buffer Overflow in PDF Viewer Application

Publication date: 2026-07-08

Last updated on: 2026-07-09

Assigner: Foxit

Description

The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bounds access to the underlying array is exposed, ultimately leading to a crash of the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-08

Last Modified

2026-07-09

Generated

2026-07-15

AI Q&A

2026-07-08

EPSS Evaluated

2026-07-14

NVD

CVE-2026-57251

EUVD

EUVD-2026-42203

Affected Vendors & Products

Vendor	Product	Version / Range
foxit	pdf_editor	From 2023.1.0.15510 (inc) to 2023.3.0.23028 (inc)
foxit	pdf_editor	From 2024.1.0.23997 (inc) to 2024.4.1.27687 (inc)
foxit	pdf_editor	From 2025.1.0.27937 (inc) to 2025.3.0.35737 (inc)
foxit	pdf_editor	From 2026.1.0.36452 (inc) to 2026.1.1.36485 (inc)
foxit	pdf_reader	to 2026.1.1.36485 (inc)
foxit	pdf_editor	to 13.2.4.24048 (inc)
foxit	pdf_editor	From 14.0.0.33046 (inc) to 14.0.4.33508 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-129	The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

Attack-Flow Graph

Executive Summary

This vulnerability occurs when the application opens a PDF file and processes a construction step that visually appears cloud-like. The issue is that the process does not properly set an upper limit or perform consistency checks on the data structure involved.

As a result, there is an out-of-bounds access to an underlying array, which means the application tries to read or write data outside the valid range of the array.

This improper access ultimately causes the application to crash.

Impact Analysis

The vulnerability can lead to a crash of the application when it processes certain PDF files.

This crash can cause denial of service, interrupting normal operations and potentially leading to loss of availability.

Given the CVSS score of 7.8 with high impact on confidentiality, integrity, and availability, the vulnerability might also be exploitable to cause more severe impacts, although the description primarily mentions a crash.

Hi! I’m here to help you understand CVE-2026-57251. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70