medium5.5
CVE-2026-3777
The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state.
Impact
The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers are still kept and later dereferenced, which under crafted JavaScript and document structures can lead to a use-after-free condition and potentially allow arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxit | Pdf Editor | through 13.2.2.24014 from 14.0.0.33046 through 14.0.2.33402 from 2023.1.0.15510 through 2023.3.0.23028 from 2024.1.0.23997 through 2024.4.1.27687 from 2025.1.0.27937 through 2025.3.0.35737 through 13.2.2.63349 |
| Foxit | Pdf Reader | through 2025.3.0.35737 through 2025.3.0.69570 |