[CVE-2026-57240] When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic st…

Descripción técnica

When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid pointer references and causing the application to crash.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Pdf editor, Pdf reader, Windows — Foxit, Microsoft

Debilidades (CWE)

CWE-416

Fuente oficial

Publicado en NIST NVD.