CVE-2026-57251: CWE-129 Improper validation of array index in Foxit Software Inc. Foxit PDF Editor
The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bounds access to the underlying array is exposed, ultimately leading to a crash of the application.
AI Analysis
Technical Summary
Foxit PDF Editor contains a vulnerability classified as CWE-129 (Improper Validation of Array Index) where the application does not properly enforce upper bounds or consistency checks on array indices during the PDF opening process. This results in out-of-bounds access to an internal array, ultimately causing the application to crash. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. The vulnerability requires local access and user interaction to exploit. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.
Potential Impact
Successful exploitation leads to a crash of Foxit PDF Editor, causing denial of service. The CVSS vector indicates high impact on confidentiality, integrity, and availability, but the primary observed effect is application crash due to out-of-bounds array access. There is no confirmed information about code execution or data corruption beyond the crash.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening untrusted PDF files and consider limiting user privileges to reduce potential impact.
CVE-2026-57251: CWE-129 Improper validation of array index in Foxit Software Inc. Foxit PDF Editor
Description
The application opens a PDF, but the cloud-like appearance of the construction process lacks proper setting of an upper limit and consistency checks. Out-of-bounds access to the underlying array is exposed, ultimately leading to a crash of the application.
CVSS v3.1
Score 7.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Foxit PDF Editor contains a vulnerability classified as CWE-129 (Improper Validation of Array Index) where the application does not properly enforce upper bounds or consistency checks on array indices during the PDF opening process. This results in out-of-bounds access to an internal array, ultimately causing the application to crash. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. The vulnerability requires local access and user interaction to exploit. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.
Potential Impact
Successful exploitation leads to a crash of Foxit PDF Editor, causing denial of service. The CVSS vector indicates high impact on confidentiality, integrity, and availability, but the primary observed effect is application crash due to out-of-bounds array access. There is no confirmed information about code execution or data corruption beyond the crash.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when opening untrusted PDF files and consider limiting user privileges to reduce potential impact.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Foxit
- Date Reserved
- 2026-06-24T03:01:18.717Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a4e27edc9d9e3dbe3eaebd7
Added to database: 07/08/2026, 10:35:25 UTC
Last enriched: 07/15/2026, 12:22:23 UTC
Last updated: 08/22/2026, 10:52:10 UTC
Views: 59
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.