Is CVE-2026-91815 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-91815?

CVE-2026-91815 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-91815

Description

Foxit PDF Editor/Reader does not perform sufficient verification of the JPEG2000 image metadata in the PDF file, which leads to out-of-bounds write in the heap buffer during decoding, potentially causing the program to crash and introducing the risk of arbitrary code execution.