Is CVE-2026-91789 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-91789?

CVE-2026-91789 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-91789

Description

Foxit PDF Editor/Reader’s U3D/GIF texture decoding path contained insufficient validation of image dimensions and related size information. Under certain conditions, this could lead to an incorrectly sized memory allocation and a subsequent out-of-bounds write during pixel processing, potentially resulting in remote code execution.