{"api_version":"1","generated_at":"2026-10-02T21:36:53+00:00","cve":"CVE-2026-91808","urls":{"html":"https://cve.report/CVE-2026-91808","api":"https://cve.report/api/cve/CVE-2026-91808.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-91808","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-91808"},"summary":{"title":"Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability","description":"A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an application crash.","state":"PUBLISHED","assigner":"Foxit","published_at":"2026-09-23 08:17:12","updated_at":"2026-09-23 17:58:26"},"problem_types":["CWE-125","CWE-125 Out-of-bounds Read (CWE-125)"],"metrics":[{"version":"3.1","source":"14984358-7092-470d-8f34-ade47a7658a2","type":"Secondary","score":"6.1","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"6.1","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","data":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","version":"3.1"}}],"references":[{"url":"https://www.foxit.com/support/security-bulletins.html","name":"https://www.foxit.com/support/security-bulletins.html","refsource":"14984358-7092-470d-8f34-ade47a7658a2","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91808","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91808","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Foxit Software Inc.","product":"Foxit PDF Editor","version":"affected Versions 2026.2 and earlier","platforms":["Windows"]},{"source":"CNA","vendor":"Foxit Software Inc.","product":"Foxit PDF Editor","version":"affected Versions 14.0.7 and earlier","platforms":["Windows"]},{"source":"CNA","vendor":"Foxit Software Inc.","product":"Foxit PDF Editor","version":"affected Versions 13.2.6 and earlier","platforms":["Windows"]},{"source":"CNA","vendor":"Foxit Software Inc.","product":"Foxit PDF Reader","version":"affected Versions 2026.2 and earlier","platforms":["Windows"]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Anonymous working with TrendAI Zero Day Initiative","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"91808","cve":"CVE-2026-91808","epss":"0.001530000","percentile":"0.048000000","score_date":"2026-09-23","updated_at":"2026-09-24 00:07:15"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-91808","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-09-23T15:25:57.837671Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-09-23T15:26:15.503Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Foxit PDF Editor","vendor":"Foxit Software Inc.","versions":[{"status":"affected","version":"Versions 2026.2 and earlier"},{"status":"affected","version":"Versions 14.0.7 and earlier"},{"status":"affected","version":"Versions 13.2.6 and earlier"}]},{"defaultStatus":"unaffected","platforms":["Windows"],"product":"Foxit PDF Reader","vendor":"Foxit Software Inc.","versions":[{"status":"affected","version":"Versions 2026.2 and earlier"}]}],"credits":[{"lang":"en","type":"finder","value":"Anonymous working with TrendAI Zero Day Initiative"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an application crash."}],"value":"A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an application crash."}],"impacts":[{"descriptions":[{"lang":"en","value":"Information Disclosure"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-125","description":"Out-of-bounds Read (CWE-125)","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-09-23T07:50:08.809Z","orgId":"14984358-7092-470d-8f34-ade47a7658a2","shortName":"Foxit"},"references":[{"url":"https://www.foxit.com/support/security-bulletins.html"}],"title":"Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability","x_generator":{"engine":"Vulnogram 1.0.5"}}},"cveMetadata":{"assignerOrgId":"14984358-7092-470d-8f34-ade47a7658a2","assignerShortName":"Foxit","cveId":"CVE-2026-91808","datePublished":"2026-09-23T07:50:08.809Z","dateReserved":"2026-09-15T07:34:45.815Z","dateUpdated":"2026-09-23T15:26:15.503Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-23 08:17:12","lastModifiedDate":"2026-09-23 17:58:26","problem_types":["CWE-125","CWE-125 Out-of-bounds Read (CWE-125)"],"metrics":{"cvssMetricV31":[{"source":"14984358-7092-470d-8f34-ade47a7658a2","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-09-23T15:25:57.837671Z","id":"CVE-2026-91808","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"91808","Ordinal":"1","Title":"Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Inf","CVE":"CVE-2026-91808","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"91808","Ordinal":"1","NoteData":"A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an application crash.","Type":"Description","Title":"Foxit PDF Editor/Reader JPEG File Parsing Out-Of-Bounds Read Inf"}]}}}