medium5.5
CVE-2026-5939
A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code…
Impact
A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Foxit | Pdf Editor | from 14.0.0 before 14.0.4 from 2023.0.0 before 2026.1.1 |
| Foxit | Pdf Reader | before 2026.1.1 |