cbcvebase.
CVE-2026-57257
published 2026-07-08

CVE-2026-57257: During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a…

PriorityP423medium6.1CVSS 3.1
AVLACLPRNUIRSUCLINAH
EPSS
0.11%
1.3th percentile
During the PRC parsing stage, there is a lack of boundary verification for the PRC entity index, which leads to an out-of-bounds read of the entity array. As a result, the application crashes.

Affected

20 ranges
VendorProductVersion rangeFixed in
foxitpdf_editor<= 13.2.4.24048
foxitpdf_editor<= 13.2.3.63444
foxitpdf_editor14.0.0.33046 – 14.0.4.33508
foxitpdf_editor14.0.0.68868 – 14.0.3.69295
foxitpdf_editor2023.1.0.15510 – 2023.3.0.23028
foxitpdf_editor2023.1.0.55583 – 2023.3.0.63083
foxitpdf_editor2024.1.0.23997 – 2024.4.1.27687
foxitpdf_editor2024.1.0.63682 – 2024.4.1.66479
foxitpdf_editor2025.1.0.27937 – 2025.3.0.35737
foxitpdf_editor2025.1.0.66692 – 2025.3.0.69570
foxitpdf_editor2026.1.0.36452 – 2026.1.1.36485
foxitpdf_editor2026.1.0.70169 – 2026.1.1.70276
foxitpdf_reader<= 2026.1.1.36485
foxitpdf_reader<= 2026.1.1.70276
foxit_software_incfoxit_pdf_editor
foxit_software_incfoxit_pdf_editor
foxit_software_incfoxit_pdf_editor
foxit_software_incfoxit_pdf_editor
foxit_software_incfoxit_pdf_editor
foxit_software_incfoxit_pdf_reader
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.