CVE-2026-57240 — Foxit PDF Editor/Reader Form Field Use-After-Free Remote Code Execution Vulnerability
When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid pointer references and …
Published: 2026-07-08 · CVSS: 7.8 · CVSS 3.1
When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid pointer references and causing the application to crash.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7