High severity7.8NVD Advisory· Published Jul 8, 2026· Updated Jul 9, 2026

CVE-2026-57254

Description

There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.

Affected products

Foxitsoftware/PDF Editor
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
Range: <=13.2.4.24048
Foxitsoftware/PDF Reader
cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
Range: <=2026.1.1.36485
Foxitsoftware/PDFllm-create

Patches

Vulnerability mechanics

References

www.foxit.com/support/security-bulletins.htmlnvdVendor Advisory

News mentions

ZDI-26-595: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Zero Day Initiative · Aug 24, 2026

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000