What is the CVSS score of CVE-2026-57254?

CVE-2026-57254 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Foxit PDF Reader are affected by CVE-2026-57254?

Foxit PDF Reader and Foxit PDF Editor are vulnerable to denial-of-service attacks through specially crafted PDF files with malformed annotations, putting any employee using these products at risk of…

How to fix or mitigate CVE-2026-57254?

Within 24 hours: Identify systems running Foxit products; communicate to users to avoid opening PDFs from untrusted sources. Within 7 days: Implement compensating controls including restricting PDF processing to verified internal/trusted external sources, disabling annotation processing where operationally feasible, and deploying email gateway rules to block suspicious PDFs. Within 30 days: Establish weekly monitoring of Foxit security advisories, prepare patch deployment procedures for when vendor releases updates, and evaluate alternative PDF readers if organizational risk tolerance is low.

Foxit PDF Reader CVE-2026-57254

EUVD-2026-42199 HIGH

Access of Resource Using Incompatible Type (Type Confusion) (CWE-843)

2026-07-08 Foxit

GHSA-hp88-72wg-hhr2

Denial Of Service Memory Corruption Foxit Pdf Editor Foxit Pdf Reader Foxit Software Inc

7.8

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

5.5 MEDIUM

A local file must be opened by a user (AV:L, UI:R, PR:N); the described impact is only a crash, so C:N/I:N/A:H - unlike the input vector's unverified C:H/I:H.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 08:55 vuln.today

DescriptionCVE.org

There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.

AnalysisAI

Type-confusion memory corruption in Foxit PDF Reader and Foxit PDF Editor allows a crafted PDF containing an abnormal annotation object - one referenced by other objects - to bypass proper type checking during parsing, corrupting memory and crashing the application. Exploitation requires a user to open the malicious file locally (UI:R); there is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, so the current confirmed impact is denial of service, though the CWE-843 class leaves open potential for code execution.

Technical ContextAI

The flaw is in Foxit's PDF parsing engine, specifically its handling of annotation objects - the interactive overlay objects (links, widgets, markup) defined in the PDF specification and reached through the cross-reference table. The root cause is CWE-843, Access of Resource Using Incompatible Type ('type confusion'): the parser encounters an annotation whose declared or expected type does not match the object actually referenced by other objects, and processes it as the wrong type without validating it. Type confusion dereferences memory under one type's layout assumptions while the underlying bytes belong to another, yielding memory corruption. Affected products per CPE are cpe:2.3:a:foxit_software_inc.:foxit_pdf_editor and cpe:2.3:a:foxit_software_inc.:foxit_pdf_reader across unspecified (wildcard) versions.

RemediationAI

Update Foxit PDF Reader and Foxit PDF Editor to the fixed build once Foxit publishes it; no exact fix version was provided in the input, so consult the vendor advisory at https://www.foxit.com/support/security-bulletins.html for the patched release number (Patch available per vendor advisory; released patched version not independently confirmed). As compensating controls until patching, avoid opening PDFs from untrusted or unsolicited sources and route inbound PDFs through a sandboxed viewer or gateway that rasterizes or reconstructs files, which neutralizes malformed annotation structures at the cost of losing interactive form and annotation fidelity; where feasible, remove Foxit as the default handler for PDFs arriving via email or web and enable Foxit's Safe Reading / protected-mode setting, which reduces exposure but may block legitimate scripted or connected-content features.