What is the CVSS score of CVE-2026-57254?

CVE-2026-57254 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Foxit PDF Reader are affected by CVE-2026-57254?

Foxit PDF Reader and Foxit PDF Editor are vulnerable to denial-of-service attacks through specially crafted PDF files with malformed annotations, putting any employee using these products at risk of…

How to fix or mitigate CVE-2026-57254?

Within 24 hours: Identify systems running Foxit products; communicate to users to avoid opening PDFs from untrusted sources. Within 7 days: Implement compensating controls including restricting PDF processing to verified internal/trusted external sources, disabling annotation processing where operationally feasible, and deploying email gateway rules to block suspicious PDFs. Within 30 days: Establish weekly monitoring of Foxit security advisories, prepare patch deployment procedures for when vendor releases updates, and evaluate alternative PDF readers if organizational risk tolerance is low.

Foxit PDF Reader CVE-2026-57254

EUVD-2026-42199 HIGH

Access of Resource Using Incompatible Type (Type Confusion) (CWE-843)

2026-07-08 Foxit

GHSA-hp88-72wg-hhr2

Memory Corruption Denial Of Service Foxit Pdf Editor Foxit Pdf Reader

7.8

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

5.5 MEDIUM

A local file must be opened by a user (AV:L, UI:R, PR:N); the described impact is only a crash, so C:N/I:N/A:H - unlike the input vector's unverified C:H/I:H.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 08:55 vuln.today

DescriptionCVE.org

There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.

AnalysisAI

Type-confusion memory corruption in Foxit PDF Reader and Foxit PDF Editor allows a crafted PDF containing an abnormal annotation object - one referenced by other objects - to bypass proper type checking during parsing, corrupting memory and crashing the application. Exploitation requires a user to open the malicious file locally (UI:R); there is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV, so the current confirmed impact is denial of service, though the CWE-843 class leaves open potential for code execution.

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Craft PDF with malformed annotation object

Delivery

Deliver file via email or web

Exploit

Victim opens PDF in Foxit

Execution

Parser skips annotation type check

Persist

Type confusion corrupts memory

Impact

Application crash (potential code execution)

Access

Craft PDF with malformed annotation object

Delivery

Deliver file via email or web

Exploit

Victim opens PDF in Foxit

Execution

Parser skips annotation type check

Persist

Type confusion corrupts memory

Impact

Application crash (potential code execution)

Vulnerability AssessmentAI

Exploitation	Exploitation requires the victim to open an attacker-supplied PDF in Foxit PDF Reader or Foxit PDF Editor (UI:R - user interaction is mandatory), and the PDF must contain an abnormal annotation object cross-referenced by other objects in a way that defeats the parser's type checking. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 base is 7.8, vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - local vector, low complexity, no privileges, but mandatory user interaction. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker crafts a PDF whose annotation object is malformed so that it is referenced by other objects under an incompatible type, then delivers it via email attachment or web download. When the victim opens the file in Foxit PDF Reader or Editor, the parser mishandles the annotation type and corrupts memory, crashing the application; given the CWE-843 type-confusion class, a carefully shaped variant could potentially be developed toward code execution, though no POC is currently identified.
Remediation	Update Foxit PDF Reader and Foxit PDF Editor to the fixed build once Foxit publishes it; no exact fix version was provided in the input, so consult the vendor advisory at https://www.foxit.com/support/security-bulletins.html for the patched release number (Patch available per vendor advisory; released patched version not independently confirmed). … Detailed patch versions, workarounds, and compensating controls in full report.