What is the CVSS score of CVE-2026-57258?

CVE-2026-57258 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H. EPSS exploitation probability: 0.1%.

Foxit PDF Editor CVE-2026-57258

EUVD-2026-42190 MEDIUM

Out-of-bounds Read (CWE-125)

2026-07-08 Foxit

GHSA-x6hw-8x39-wcwp

Buffer Overflow Information Disclosure Foxit Pdf Editor Foxit Pdf Reader

6.1

CVSS 3.1 · Vendor: Foxit

Severity by source

Vendor (Foxit) PRIMARY

6.1 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

vuln.today AI

6.1 MEDIUM

File must be opened by the user (AV:L, UI:R); no attacker privileges required (PR:N); crash gives High availability impact, out-of-bounds read gives Low confidentiality; no integrity or scope change.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (Foxit).

CVSS VectorVendor: Foxit

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 08, 2026 - 09:24 vuln.today

DescriptionCVE.org

The PRC file header parsing logic trusts the constructed file structure description information, assumes that the underlying array contains elements and reads them, leading to out-of-bounds reads and application crashes.

AnalysisAI

Out-of-bounds read in Foxit PDF Editor and Foxit PDF Reader's PRC 3D file header parser crashes the application and may leak process memory when a victim opens a specially crafted PDF. Affected version ranges span Foxit PDF Reader through 2026.1.1 and multiple Foxit PDF Editor release branches through 13.2.4, 14.0.4, and 2026.1.1. No public exploit code or confirmed active exploitation has been identified at time of analysis; the CVSS availability impact is rated High due to a reliable application crash on trigger, with a minor confidentiality component from out-of-bounds memory exposure.

Technical ContextAI

The affected code handles PRC (Product Representation Compact), a binary 3D model format used to embed rich 3D content inside PDF documents. The PRC header parsing logic trusts file-supplied structure description metadata - specifically array element counts and offsets - without validating whether those indices fall within allocated buffer bounds before dereferencing them. This is a textbook CWE-125 (Out-of-Bounds Read): the parser assumes the constructed file structure accurately describes the underlying array, reads elements at attacker-controlled offsets, and crashes when those offsets exceed the actual allocation. The affected products are identified by CPEs cpe:2.3:a:foxit_software_inc.:foxit_pdf_editor and cpe:2.3:a:foxit_software_inc.:foxit_pdf_reader. The tag 'Buffer Overflow' in source intelligence likely reflects the memory-safety class rather than a write primitive, consistent with CWE-125 and the absence of an integrity impact in the CVSS vector.

RemediationAI

The primary remediation is to upgrade Foxit PDF Reader and Foxit PDF Editor to versions that address this bulletin, as specified at https://www.foxit.com/support/security-bulletins.html - exact patched version numbers must be obtained directly from that advisory, as no fixed release identifier was independently confirmed in the available data. Until patching is complete, organizations should instruct users to avoid opening PDF files from untrusted or unexpected sources, particularly files that may contain embedded 3D PRC content. If Foxit's application settings permit disabling 3D content rendering or PRC model processing, doing so eliminates the vulnerable code path at the cost of losing 3D PDF functionality. Enterprise deployments managed via group policy or Foxit volume licensing should prioritize pushing the updated installer through software distribution channels given the broad affected version range spanning three Editor release branches.