Foxit Pdf Editor CVE-2026-3776

The CVSS score of 5.5 reflects a medium-severity vulnerability with low attack complexity and no privilege requirements, but limited scope (local attack vector only, no confidentiality or integrity impact). The CVSS vector (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) indicates the attack requires local file access and user interaction (opening a malicious PDF), but successfully achieves availability denial. From a real-world perspective, this is a legitimate denial-of-service concern for organizations processing untrusted PDFs (legal discovery, government document intake, content creation workflows), but the local attack vector and user interaction requirement limit widespread network exploitation. No EPSS score or exploitation probability data was provided. The absence of public exploit code and no confirmation of active exploitation (no CISA KEV status provided) suggest this is a moderate-priority fix rather than an emergency response scenario. However, organizations that rely on Foxit tools for batch or automated PDF processing should prioritize patching once a fix is released.

A local attacker crafts a malicious PDF file containing a stamp annotation with an intentionally missing or invalid AP (appearance) entry, then tricks a user into opening the file with Foxit PDF Reader or Foxit PDF Editor. When the application attempts to render or process the stamp annotation, it dereferences the null AP pointer without validation, causing an unhandled exception and immediate application crash, denying the user access to the PDF and potentially interrupting batch processing workflows. This scenario requires user interaction but could be automated if the attacker controls the document intake process.