ZDI-26-730: Foxit PDF Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability
Foxit PDF Reader DeviceN out-of-bounds write can enable remote code execution after user interaction.
52
Vulnerability3 · 1 read
CVE-2026-91794
Out-of-bounds RCE in Foxit PDF Editor/Reader due to Malformed Color Space Data
- CVSS 3.1
- 7.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
This vulnerability is an out-of-bounds write in the PDF rendering process of Foxit PDF Editor/Reader caused by insufficient consistency and boundary validation of malformed color space data. It can trigger program crashes and may enable remote code execution, presenting a high risk to system integrity. An attacker could exploit this flaw to gain unauthorized access and perform malicious actions, potentially affecting users or devices with the affected product. Currently, there is no known public exploit, and the vulnerability has not yet been actively exploited.
What to do: Upgrade to the latest version of Foxit PDF Editor/Reader; implement robust color space validation and boundary checks; monitor for out-of-bounds write issues and malformed input handling; verify PDF rendering process security and test for potential RCE risks.
| Product | Affected |
|---|---|
| Foxit PDF Editor/Reader | — |
Estimated exposure
nicheNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient consistency and boundary validation when processing malformed color space data, which may cause the program to crash and potentially lead to remote code execution.
- Vendors
- foxit
- Products
- pdf editor, pdf reader
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H