This vulnerability (CVE-2026-5943) in Foxit PDF Editor is classified as CWE-416 (Use After Free). It occurs when document structural anomalies cause inconsistencies between page element relationships and internal index states. When scripts modify the document, the validity of object references is not properly maintained, resulting in a crash caused by accessing an invalid pointer during queries related to page information. The affected versions include 2026.1 and earlier, 14.0.3 and earlier, and 13.2.3 and earlier. The CVSS 3.1 base score is 7.8, indicating a high severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to application crashes and potentially allow an attacker to execute arbitrary code or cause denial of service. The high CVSS score reflects significant impact on confidentiality, integrity, and availability of the affected system. However, no known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level has been provided by Foxit Software Inc., users should monitor vendor communications for updates. Until a patch is available, users should exercise caution when opening untrusted PDF documents and consider limiting user interaction with potentially malicious scripts within PDFs.