HIGH🇬🇧 English

CVE-2026-5941

CVSS 7.8v3.1pub. 2026-04-27upd. 2026-04-29

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes and program crashes during internal data structure construction.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Foxit Pdf Editor

    APP
    Foxit
    14.0.0 – 14.0.4 (bez)2023.0.0 – 2026.1.1 (bez)

  • Foxit Pdf Reader

    APP
    Foxit
    < 2026.1.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2022-28104CRITICAL9.8ten sam produkt

Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability.

CVE-2022-24954CRITICAL9.8ten sam produkt

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related t...

CVE-2022-24955CRITICAL9.8ten sam produkt

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for...

CVE-2021-38563CRITICAL9.8ten sam produkt

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situatio...

CVE-2026-5940HIGH7.8ten sam produkt

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated o...