Description
Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially resulting in remote code execution.
Published: 2026-09-23
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Patch Immediately
AI Analysis

Impact

Foxit PDF Editor and Reader have an integer overflow in the U3D/GIF texture decoding path that can result in an out‑of‑bounds write during pixel processing, which may allow an attacker to execute arbitrary code. This flaw is a classic out‑of‑bounds write weakness (CWE‑787) and can compromise any system that opens a malicious PDF.

Affected Systems

The vulnerability affects Foxit Software Inc. products: Foxit PDF Editor and Foxit PDF Reader. No specific version information is supplied; all installed instances are potentially impacted until a fix is applied.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity, while the EPSS score of less than 1% indicates a low probability of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector requires an attacker to deliver a crafted PDF to a user. If the user opens the malicious file, the out‑of‑bounds write may be triggered, giving the attacker the ability to run code with the privileges of the user process.

Generated by OpenCVE AI on September 23, 2026 at 14:56 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Foxit PDF Editor or Reader patch that addresses the U3D/GIF decoding flaw.
  • If a patch is not yet available, block or quarantine locations where malicious PDFs could be accessed and limit the permission of users who can open PDF files until the issue is resolved.
  • Use application settings or group policy to disable U3D or GIF texture processing if such options exist, as a temporary workaround pending a vendor patch.

Generated by OpenCVE AI on September 23, 2026 at 14:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 08 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Foxit
Foxit pdf Editor
Foxit pdf Reader
Microsoft
Microsoft windows
CPEs cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*
cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Foxit
Foxit pdf Editor
Foxit pdf Reader
Microsoft
Microsoft windows

Thu, 24 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Foxitsoftware
Foxitsoftware foxit Pdf Editor
Foxitsoftware foxit Reader
Vendors & Products Foxitsoftware
Foxitsoftware foxit Pdf Editor
Foxitsoftware foxit Reader

Wed, 23 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 23 Sep 2026 11:45:00 +0000

Type Values Removed Values Added
Description Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially resulting in remote code execution.
Title Foxit PDF Editor/Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Foxit Pdf Editor Pdf Reader
Foxitsoftware Foxit Pdf Editor Foxit Reader
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Foxit

Published:

Updated: 2026-09-23T14:14:51.065Z

Reserved: 2026-09-15T07:34:40.287Z

Link: CVE-2026-91789

cve-icon Vulnrichment

Updated: 2026-09-23T14:14:48.209Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-23T08:17:10.753

Modified: 2026-10-08T12:38:10.007

Link: CVE-2026-91789

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-24T09:14:39Z

Weaknesses