Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2026-57254
7.8 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): None (N)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 3 weeks, 1 day ago Activity log
  • Created & dismissed (no matching packages found) suggestion 3 weeks, 1 day ago
Foxit PDF Editor/Reader Annotation Type Confusion Vulnerability

There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash.

Affected products

Foxit PDF Editor
  • ==Versions 14.0.4 and earlier
  • ==Versions 13.2.4 and earlier
  • ==Versions 2026.1.1 and earlier
Foxit PDF Reader
  • ==Versions 2026.1.1 and earlier