VYPR
Get started
← All advisories
Medium severity5.5NVD Advisory· Published Apr 27, 2026· Updated Apr 29, 2026

CVE-2026-5939

CVE-2026-5939

Description

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution.

Affected products

2
  • Foxit/Pdf Editor
    cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
    Range: >=14.0.0,<14.0.4
  • Foxit/Pdf Reader
    cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
    Range: <2026.1.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.