{"id":"CVE-2026-57254","aliases":["EUVD-2026-42199","GHSA-hp88-72wg-hhr2"],"status":"published","title":"Foxit PDF Editor/Reader Annotation Type Confusion Vulnerability","description":"There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0017,"percentile":0.06494,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-843"],"published":"2026-07-08T07:36:10Z","modified":"2026-07-09T11:59:16Z","products":[{"vendor":"foxit","product":"pdf_editor"},{"vendor":"foxit","product":"pdf_reader"},{"vendor":"foxit software inc.","product":"foxit pdf editor"},{"vendor":"foxit software inc.","product":"foxit pdf reader"}],"references":[{"url":"https://www.foxit.com/support/security-bulletins.html","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57254"},{"url":"https://github.com/advisories/GHSA-hp88-72wg-hhr2"}],"sources":{"cve":[{"id":"CVE-2026-57254","title":"Foxit PDF Editor/Reader Annotation Type Confusion Vulnerability","description":"There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.","status":"published","published":"2026-07-08T07:36:10.974Z","modified":"2026-07-08T12:46:02.325Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-843"],"updated_at":"2026-11-02T13:43:44.898272Z"}],"euvd":[{"id":"EUVD-2026-42199","description":"There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.","status":"published","published":"2026-07-08T07:36:10Z","modified":"2026-07-08T12:46:02Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:11.058935Z"}],"ghsa":[{"id":"GHSA-hp88-72wg-hhr2","title":"There is an abnormal annotation within the PDF that is referenced by other objects. When the...","description":"There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.","status":"published","published":"2026-07-08T09:31:52Z","modified":"2026-07-08T09:31:52Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-843"],"updated_at":"2026-11-02T15:09:19.587132Z"}],"nvd":[{"id":"CVE-2026-57254","description":"There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.","status":"published","published":"2026-07-08T09:16:33.52Z","modified":"2026-07-09T11:59:16.257Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-843"],"updated_at":"2026-11-02T14:12:28.040501Z"}]}}