CVE-2026-91804

Analyzed Analyzed - Analysis Complete

Heap-based Out-of-Bounds Write in Foxit PDF Editor/Reader

Publication date: 2026-09-23

Last updated on: 2026-10-08

Assigner: Foxit

Description

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s rendering of Circle annotations with malformed Cloudy appearance streams in specially crafted PDF files. Insufficient validation of the appearance geometry can result in memory corruption and application crashes.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-10-08

Generated

2026-10-13

AI Q&A

2026-09-23

EPSS Evaluated

2026-10-12

NVD

CVE-2026-91804

EUVD

EUVD-2026-85119

Affected Vendors & Products

Vendor	Product	Version / Range
foxit	pdf_editor	From 2023.1.0.15510 (inc) to 2023.3.0.23028 (inc)
foxit	pdf_editor	From 2024.1.0.23997 (inc) to 2024.4.1.27687 (inc)
foxit	pdf_editor	From 2025.1.0.27937 (inc) to 2025.3.0.35737 (inc)
foxit	pdf_editor	to 13.2.5.63482 (inc)
foxit	pdf_editor	From 14.0.0.33046 (inc) to 14.0.7.33751 (inc)
foxit	pdf_editor	From 2026.1.0.36452 (inc) to 2026.2.0.39747 (inc)
foxit	pdf_reader	to 2026.2.0.39747 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is a heap-based out-of-bounds write vulnerability in Foxit PDF Editor/Reader. It occurs when processing Circle annotations with malformed Cloudy appearance streams in specially crafted PDF files. The software fails to properly validate the appearance geometry, leading to memory corruption and potential application crashes.

Detection Guidance

This vulnerability involves malformed PDF files with Circle annotations. Detection requires inspecting PDF files for suspicious annotations or using PDF analysis tools to check for heap-based out-of-bounds writes. No direct commands are provided in the context.

Impact Analysis

An attacker could exploit this to execute arbitrary code on your system, gain unauthorized access, or cause denial-of-service conditions by crashing the application. This requires tricking you into opening a malicious PDF file.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR or HIPAA if exploited to access or manipulate sensitive data within PDF files, leading to unauthorized disclosure or integrity breaches. However, the provided CVE details do not explicitly address compliance implications.

Mitigation Strategies

Update Foxit PDF Editor or Reader to the latest version to patch the vulnerability. Avoid opening untrusted PDF files, especially those with Circle annotations or Cloudy appearance streams. Disable JavaScript in Foxit PDF Reader if not required.

Hi! I’m here to help you understand CVE-2026-91804. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70