CVE-2026-91792

Analyzed Analyzed - Analysis Complete

Use-After-Free in Foxit PDF Editor/Reader via JavaScript Actions

Publication date: 2026-09-23

Last updated on: 2026-10-08

Assigner: Foxit

Description

When processing a specially crafted PDF, Foxit PDF Editor/Reader may perform reentrant zoom and layout operations through page- and annotation-related JavaScript actions. This can cause the application to access page objects after they have been released, resulting in a use-after-free condition and an application crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-10-08

Generated

2026-10-13

AI Q&A

2026-09-23

EPSS Evaluated

2026-10-12

NVD

CVE-2026-91792

EUVD

EUVD-2026-85130

Affected Vendors & Products

Vendor	Product	Version / Range
foxit	pdf_editor	From 2023.1.0.15510 (inc) to 2023.3.0.23028 (inc)
foxit	pdf_editor	From 2024.1.0.23997 (inc) to 2024.4.1.27687 (inc)
foxit	pdf_editor	From 2025.1.0.27937 (inc) to 2025.3.0.35737 (inc)
foxit	pdf_editor	to 13.2.5.63482 (inc)
foxit	pdf_editor	From 14.0.0.33046 (inc) to 14.0.7.33751 (inc)
foxit	pdf_editor	From 2026.1.0.36452 (inc) to 2026.2.0.39747 (inc)
foxit	pdf_reader	to 2026.2.0.39747 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability occurs when Foxit PDF Editor or Reader processes a specially crafted PDF file containing malicious JavaScript actions. These actions trigger reentrant zoom and layout operations that lead to accessing page objects after they have been released, causing a use-after-free condition and application crash.

Detection Guidance

Detecting this vulnerability requires monitoring for crashes or unusual behavior when processing PDFs with JavaScript actions. Check Foxit application logs for segmentation faults or application crashes after opening PDFs. Enable JavaScript debugging in Foxit settings to log suspicious actions. Inspect network traffic for unexpected PDF downloads or embedded scripts.

Impact Analysis

If exploited, this vulnerability could allow an attacker to crash the application or potentially execute arbitrary code on your system. This may lead to unauthorized access, data theft, or further compromise of your device depending on the attacker's goals.

Compliance Impact

The vulnerability involves a use-after-free condition in Foxit PDF Editor/Reader triggered by specially crafted PDFs with JavaScript actions. This could lead to application crashes but does not explicitly indicate data exposure or unauthorized access, which are key concerns for GDPR or HIPAA compliance.

Mitigation Strategies

Update Foxit PDF Editor/Reader to the latest version to patch the vulnerability. Avoid opening untrusted PDF files or disable JavaScript in the application settings to reduce attack surface.

Hi! I’m here to help you understand CVE-2026-91792. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70