CVE-2026-91789

Foxit PDF Editor/Reader contains a vulnerability in its U3D/GIF texture decoding path that lacks sufficient validation of image dimensions and size information. This flaw can cause incorrect memory allocation and a subsequent out-of-bounds write during pixel processing, potentially leading to remote code execution. An attacker could potentially exploit this to gain remote access or execute arbitrary code. The affected product is Foxit PDF Editor/Reader, and the current exploitation status is none known.

What to do: Upgrade to patched versions of Foxit PDF Editor/Reader. Implement strict image dimension and size validation, disable U3D/GIF texture decoding paths, and enforce strict memory bounds to prevent out-of-bounds writes. Regularly audit deployed plugins and verify exposure of sensitive processing paths.