What is the CVSS score of CVE-2026-57257?

CVE-2026-57257 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H. EPSS exploitation probability: 0.1%.

Foxit PDF Editor CVE-2026-57257

EUVD-2026-42191 MEDIUM

Out-of-bounds Read (CWE-125)

2026-07-08 Foxit

GHSA-89mp-9v96-585h

Buffer Overflow Information Disclosure Foxit Pdf Editor Foxit Pdf Reader

6.1

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

6.1 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

vuln.today AI

6.1 MEDIUM

File must be opened locally (AV:L, UI:R); OOB read leaks limited memory (C:L) but causes crash (A:H); no write primitive available (I:N).

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 09:25 vuln.today

DescriptionCVE.org

During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a result, the application crashes.

AnalysisAI

Out-of-bounds read in Foxit PDF Editor and PDF Reader during PRC (Product Representation Compact) 3D content parsing crashes the application and leaks limited memory content. Affects multiple concurrent release trains including versions 2026.1.1, 14.0.4, and 13.2.4 and earlier. Exploitation requires a victim to open a specially crafted PDF containing a malicious PRC entity - no public exploit has been identified at time of analysis.

Technical ContextAI

PRC (Product Representation Compact) is an ISO 14739-1 binary format used to embed compact 3D geometry and product structure data inside PDF files. Foxit's PRC parser fails to validate the entity index before accessing the entity array, a classic CWE-125 (Out-of-Bounds Read) defect. When a crafted PRC stream supplies an index beyond the allocated array boundary, the parser reads from adjacent heap or stack memory - causing an application crash (high availability impact) and potentially exposing a small amount of process memory (low confidentiality impact). Affected CPE strings confirm both the PDF Editor (cpe:2.3:a:foxit_software_inc.:foxit_pdf_editor) and PDF Reader (cpe:2.3:a:foxit_software_inc.:foxit_pdf_reader) product lines across three active version branches.

RemediationAI

Patch available per vendor advisory - Foxit reported this issue and maintains security bulletins at https://www.foxit.com/support/security-bulletins.html, where the exact fixed versions for each release branch (2026.x, 14.x, 13.x) should be confirmed and applied. Users should upgrade to the latest available patched release for their installed branch as soon as possible. As a compensating control where immediate patching is not feasible, organizations should configure email gateways and web proxies to inspect or quarantine PDF files containing embedded 3D PRC content, though this may break legitimate 3D PDF workflows. Disabling or removing Foxit PDF Editor/Reader as the default handler for PDF files and substituting a viewer not affected by this parsing path is another interim option, with the trade-off of losing Foxit-specific features. User awareness training to avoid opening unsolicited PDFs with 3D content provides marginal additional protection.