[CVE-2026-57244] After JavaScript resetting the form, the synchronization process lacks re-entry protection and objec…

Descripción técnica

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Pdf editor, Pdf reader, Windows, Macos — Foxit, Microsoft, Apple

Debilidades (CWE)

CWE-416

Fuente oficial

Publicado en NIST NVD.