NetSight
high7.8

CVE-2026-91811

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fa…

Impact

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s PRC parser due to insufficient validation of vertex indices in triangular fan texture meshes. Successful exploitation could result in memory corruption and an application crash.

Affected products

VendorProductAffected versions
FoxitPdf Editor
through 13.2.5.63482
from 14.0.0.33046 through 14.0.7.33751
from 2023.1.0.15510 through 2023.3.0.23028
from 2024.1.0.23997 through 2024.4.1.27687
from 2025.1.0.27937 through 2025.3.0.35737
from 2026.1.0.36452 through 2026.2.0.39747
FoxitPdf Reader
through 2026.2.0.39747
through 2026.2.1.39815

Weakness classification

References