CVE-2026-3777 in Foxit PDF Editor

Сводка (Английский)

The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state. When a script modifies the zoom property and then triggers a page change, the original view object may be destroyed while stale pointers are still kept and later dereferenced, which under crafted JavaScript and document structures can lead to a use-after-free condition and potentially allow arbitrary code execution.

Ответственный

Foxit

Резервировать

08.03.2026

Раскрытие

01.04.2026

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
354540	Foxit PDF Editor/PDF Reader JavaScript повреждение памяти	416	Не определено	Не определено	CVE-2026-3777