What is the CVSS score of CVE-2026-57253?

CVE-2026-57253 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H. EPSS exploitation probability: 0.1%.

Foxit PDF Reader CVE-2026-57253

EUVD-2026-42201 MEDIUM

Out-of-bounds Read (CWE-125)

2026-07-08 Foxit

GHSA-p7jh-5fj9-qv9q

Buffer Overflow Information Disclosure Foxit Pdf Editor Foxit Pdf Reader

6.1

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

6.1 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

vuln.today AI

6.1 MEDIUM

AV:L and UI:R reflect file-open delivery; PR:N as no attacker privileges needed; A:H for reliable crash; C:L for incidental out-of-bounds read disclosure.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 09:28 vuln.today

DescriptionCVE.org

An abnormal image object causes the renderer to enter the wrong processing branch. When converting the scan lines, an invalid image buffer pointer is used, resulting in the application crashing.

AnalysisAI

Out-of-bounds read in Foxit PDF Reader and PDF Editor allows a local attacker to crash the application and potentially disclose limited memory contents by delivering a specially crafted PDF containing a malformed image object. The vulnerability triggers when the renderer encounters an abnormal image object, causes it to enter an incorrect processing branch, and subsequently dereferences an invalid buffer pointer during scan line conversion. No public exploit code has been identified and no CISA KEV listing exists, but the CVSS availability impact is rated High, meaning successful exploitation reliably causes application termination.

Technical ContextAI

The vulnerability resides in the image rendering subsystem of Foxit PDF Editor and Foxit PDF Reader (CPE: cpe:2.3:a:foxit_software_inc.:foxit_pdf_editor:*:*:*:*:*:*:*:* and cpe:2.3:a:foxit_software_inc.:foxit_pdf_reader:*:*:*:*:*:*:*:*). CWE-125 (Out-of-bounds Read) is the root cause: an unexpected or malformed image object causes the renderer's control flow to diverge into an incorrect code path. Within that path, a stale or corrupted image buffer pointer is used during scan line conversion, resulting in a read from an invalid or out-of-range memory address. Although tagged as 'Buffer Overflow' in the intelligence feed, CWE-125 more precisely describes an out-of-bounds read - this class of bug can cause both application crashes (availability impact) and incidental disclosure of adjacent heap or stack memory (low confidentiality impact). The abnormal image object is entirely attacker-controllable through PDF image stream construction, making the trigger deterministic once a crafted file is delivered.

RemediationAI

Consult the Foxit security bulletins page at https://www.foxit.com/support/security-bulletins.html for patched release versions for each affected branch - the input data does not supply explicit fixed version numbers beyond identifying 2026.1.1, 14.0.4, and 13.2.4 as the last affected versions, so the next incremental release in each branch should be applied. Organizations running Foxit PDF Editor across legacy branches (13.x, 14.x, and 2026.x) should prioritize updating each independently as Foxit maintains parallel release trains. As a compensating control where immediate patching is not feasible, restrict end-user ability to open PDF files from untrusted sources, enforce application allowlisting to block execution of vulnerable Foxit versions, and consider routing PDF rendering through sandboxed environments (e.g., browser-based PDF viewers). Disabling automatic rendering of embedded image objects is not exposed as a user-configurable setting in Foxit products to the analyst's knowledge, so network-level controls (blocking delivery of PDFs from untrusted external sources via email gateway or web proxy) can reduce exposure. Note that these controls do not eliminate the vulnerability and patch application remains the definitive fix.