CVE-2026-91802 in PDF Editor

Riassunto

di MITRE • 23/09/2026

A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: Foxit
• Prenotare: 15/09/2026
• Divulgazione: 23/09/2026
• Moderazione: accettato
• Voce: VDB-408868
• CPE: pronto
• CWE: CWE-122 (confermato)
• CVSS: 7.8 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Hostingprovider, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-91802
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-91802
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-91802/