Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-57260

Security vulnerability in Foxit PDF Editor/Reader — U3D Adobe Mesh Decompression (Type Confusion / Invalid Pointer Dereference)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Foxit

Description

The application opened a PDF file containing an abnormal Unity 3D object. During parsing, the application incorrectly resolved a portion of the abnormal object as a pointer and used it as a valid address, ultimately causing the application to crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Foxit Software Inc. Foxit PDF Editor

Default version status: unaffected

  • Versions 2026.1.1 and earlieraffected
  • Versions 14.0.4 and earlieraffected
  • Versions 13.2.4 and earlieraffected

Foxit Software Inc. Foxit PDF Editor

Default version status: unaffected

  • Versions 2026.1.1 and earlieraffected
  • Versions 14.0.3 and earlieraffected
  • Versions 13.2.3 and earlieraffected

Foxit Software Inc. Foxit PDF Reader

Default version status: unaffected

  • Versions 2026.1.1 and earlieraffected

References