NetSight
high7.8

CVE-2026-57240

When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid point…

Impact

When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid pointer references and causing the application to crash.

Affected products

VendorProductAffected versions
FoxitPdf Editor
through 13.2.4.24048
from 14.0.0.33046 through 14.0.4.33508
from 2023.1.0.15510 through 2023.3.0.23028
from 2024.1.0.23997 through 2024.4.1.27687
from 2025.1.0.27937 through 2025.3.0.35737
from 2026.1.0.36452 through 2026.1.1.36485
FoxitPdf Reader
through 2026.1.1.36485

Weakness classification

References