ZDI-26-730: Foxit PDF Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability
Foxit PDF Reader DeviceN out-of-bounds write can enable remote code execution after user interaction.
ZDI published ZDI-26-730, an out-of-bounds write in Foxit PDF Reader's DeviceN colorspace processing. A remote attacker can execute arbitrary code if the user opens a crafted file or visits a malicious page. The issue is tracked as CVE-2026-91794 with a ZDI CVSS score of 7.8. Exploitation in the wild is not reported.
- ZDI-26-730 is an out-of-bounds write in Foxit PDF Reader DeviceN colorspace handling.
- The flaw can lead to remote code execution.
- User interaction is required via a malicious page or file.
- ZDI rated it CVSS 7.8 under CVE-2026-91794.
- CVEs
- CVE-2026-91794
- Vendors
- Foxit
- Products
- Foxit PDF Reader
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-91794 | Out-of-bounds RCE in Foxit PDF Editor/Reader due to Malformed Color Space Data | 7.8 | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.