High severity7.8NVD Advisory· Published Sep 23, 2026· Updated Oct 8, 2026
CVE-2026-91789
CVE-2026-91789
Description
Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially resulting in remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
1- www.foxit.com/support/security-bulletins.htmlnvdVendor Advisory
News mentions
2- Foxit PDF Editor/Reader: 23 Vulnerabilities Disclosed in Single Batch, Affecting Multiple ComponentsVypr Intelligence · Sep 23, 2026
- ZDI-26-721: Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution VulnerabilityZero Day Initiative · Sep 23, 2026