OCTOBER 9, 2026
Live Feed
Back to database
Case File

CVE-2026-91815

HIGH · CVSS 7.8 EPSS 0.13% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-23 · Last synced 2026-10-09

CyberRota Analysis

AI-Generated

Foxit PDF Editor/Reader is vulnerable due to inadequate verification of JPEG2000 image metadata in PDF files, which can result in an out-of-bounds write in the heap buffer during decoding. This flaw may lead to program crashes and poses a significant risk of arbitrary code execution. Organizations using this software should prioritize patching to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-91815
Severity
HIGH
CVSS
7.8
EPSS
0.13%

Original NVD Description

Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap buffer during decoding, potentially causing the program to crash and introducing the risk of arbitrary code execution.

Related CVEs

Other vulnerabilities affecting the same vendor(s)