IT

Tracker / CVE-2026-57250

CVE-2026-57250

High 7.8

When the application opens a PDF and JavaScript resets the form fields, the script re-enters the interface. The underlying native object is damaged, but the application does not perform validation. The function call on the damaged object leads to the application crashing.

Affected products and versions

foxit pdf_editor · … → 13.2.3.63444
foxit pdf_editor · … → 13.2.4.24048
foxit pdf_editor · 14.0.0.33046 → 14.0.4.33508
foxit pdf_editor · 14.0.0.68868 → 14.0.3.69295
foxit pdf_editor · 2023.1.0.15510 → 2023.3.0.23028
foxit pdf_editor · 2023.1.0.55583 → 2023.3.0.63083
foxit pdf_editor · 2024.1.0.23997 → 2024.4.1.27687
foxit pdf_editor · 2024.1.0.63682 → 2024.4.1.66479
foxit pdf_editor · 2025.1.0.27937 → 2025.3.0.35737
foxit pdf_editor · 2025.1.0.66692 → 2025.3.0.69570
foxit pdf_editor · 2026.1.0.36452 → 2026.1.1.36485
foxit pdf_editor · 2026.1.0.70169 → 2026.1.1.70276
foxit pdf_reader · … → 2026.1.1.36485
foxit pdf_reader · … → 2026.1.1.70276

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References