Vulnerabilitymedium

Foxit, LibRaw vulnerabilities

Cisco TalosApr 16, 2026 · 19:00 UTC (Apr 16, 2026)1 min read1 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-3779 CVE-2026-20911 CVE-2026-21413 CVE-2026-20889 CVE-2026-24660 CVE-2026-24450 CVE-2026-20884

Tags: cve-2026-20889 cve-2026-20911 cve-2026-21413 cve-2026-24660 cve-2026-3779 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-21413 +5 related CVEs CVE-2026-20889 CVE-2026-20911 CVE-2026-20884 CVE-2026-24450 CVE-2026-24660	A heap-based buffer overflow vulnerability exists in the lossless_jpeg_load_raw functionality of LibRaw Commit 0b56545 and Commit d20315b	9.8 group max	1%	PoC ×2	Apr 7, 2026
CVE-2026-3779	The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted…	7.8	<1%	PoC	Apr 1, 2026

From the original article

1 min read at blog.talosintelligence.com

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed one Foxit Reader vulnerability, and six LibRaw file reader vulnerabilities. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability disclosure policy .

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.