NetSight
high7.8

CVE-2026-91802

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buf…

Impact

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash.

Affected products

VendorProductAffected versions
FoxitPdf Editor
through 13.2.5.63482
from 14.0.0.33046 through 14.0.7.33751
from 2023.1.0.15510 through 2023.3.0.23028
from 2024.1.0.23997 through 2024.4.1.27687
from 2025.1.0.27937 through 2025.3.0.35737
from 2026.1.0.36452 through 2026.2.0.39747
FoxitPdf Reader
through 2026.2.0.39747

Weakness classification

References