Unrated severityNVD Advisory· Published Jul 8, 2026· Updated Jul 8, 2026
Foxit PDF Editor/Reader Annotation Use-After-Free Remote Code Execution Vulnerability
CVE-2026-57237
Description
When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.