CVE-2026-57245

When the application opens a PDF, traverses and builds the annotation elements related to hyperlinks, it fails to validate the abnormal annotation relationships and field combinations. This results in the internal objects entering an invalid state. Eventually, during the destruction phase, an invalid pointer write occurred, causing the application to crash.

• CWE-416

• https://www.foxit.com/support/security-bulletins.htmlVendor Advisory

Published

Jul 8, 2026

Last Modified

Jul 9, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5724The frontend gRPC server's streaming interceptor chain did n…6.3
• CVE-2026-57240When the application opens a PDF file and JavaScript deletes…7.8
• CVE-2026-57241The application opens the PDF, and JavaScript performs opera…6.1
• CVE-2026-57242The application opens the PDF, and JavaScript modifies the f…7.8
• CVE-2026-57243During the process of page opening and form formatting, a Ja…6.1
• CVE-2026-57244After JavaScript resetting the form, the synchronization pro…7.8
• CVE-2026-57246When dealing with abnormally constructed objects, there is a…7.8
• CVE-2026-57247The application re-enters the document structure via field p…7.8
• CVE-2026-57248When the application opens a PDF file and JavaScript writes …7.8
• CVE-2026-57249After the application opened the PDF file, the script first …7.8
• CVE-2026-57250When the application opens a PDF and JavaScript resets the f…7.8
• CVE-2026-57251The application opens a PDF, but the cloud-like appearance o…7.8