Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially resulting in remote code execution.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.foxit.com/support/security-bulletins.html Vendor Advisory
Vendor advisories in the News 1
- ZDI-26-721: Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability Zero Day Initiative: published advisories · 2026-09-23
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · foxitNVD modified 2026-10-08 12:38
Affected (CPE criteria) 2
cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
References 1
- https://www.foxit.com/support/security-bulletins.html Vendor Advisory