What is the CVSS score of EUVD-2026-17755?

EUVD-2026-17755 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Foxit Pdf Editor EUVD-2026-17755

| CVE-2026-3777 MEDIUM

Use After Free (CWE-416)

2026-04-01 Foxit

GHSA-6xgc-8m9r-qvgm

Use After Free RCE Memory Corruption Foxit Pdf Editor Foxit Pdf Reader

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Apr 01, 2026 - 01:45 euvd

EUVD-2026-17755

Analysis Generated

Apr 01, 2026 - 01:45 vuln.today

CVE Published

Apr 01, 2026 - 01:40 nvd

MEDIUM 5.5

DescriptionCVE.org

The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers are still kept and later dereferenced, which under crafted JavaScript and document structures can lead to a use-after-free condition and potentially allow arbitrary code execution.

AnalysisAI

Use-after-free in Foxit PDF Editor and Foxit PDF Reader allows local attackers to achieve arbitrary code execution by crafting malicious JavaScript that manipulates document zoom and page state, causing stale view cache pointers to be dereferenced after the underlying view object is destroyed. The vulnerability requires user interaction (opening a crafted PDF) and local access, with a CVSS score of 5.5 reflecting denial-of-service impact, though the underlying memory corruption (CWE-416) and RCE tags indicate higher real-world severity under exploitation.

Technical ContextAI

The vulnerability exists in Foxit's PDF rendering engine's internal view cache management system. When JavaScript embedded in a PDF document modifies the zoom property (via document.zoom or similar APIs) and subsequently triggers a page state change, the application fails to properly validate the lifetime of cached view pointers. This leads to a use-after-free condition (CWE-416) where freed memory locations are subsequently dereferenced. The affected CPE strings indicate both Foxit PDF Editor (a full-featured PDF authoring tool) and Foxit PDF Reader (the lightweight viewer) contain this flaw, suggesting the vulnerability resides in a shared core rendering library used by both products.

RemediationAI

Users should immediately check the Foxit security bulletins page at https://www.foxit.com/support/security-bulletins.html for the latest patched versions of Foxit PDF Editor and Foxit PDF Reader. Patch availability and specific fixed versions should be confirmed from Foxit's official advisory. Until a patch can be applied, avoid opening untrusted PDF documents from external sources, particularly those containing embedded JavaScript, and consider disabling JavaScript execution in PDF reader settings if the application permits this configuration.