CVE-2026-91815
Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap buffer during decoding, potentially causing the program to crash and introducing the risk of arbitrary code execution.
- Published Sep 23, 2026
- CVSS 7.8 high
- 0.1% chance of exploitation in the next 30 days (EPSS)