Home
HIGH: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HDefault status
unaffected
Versions 2026.1.1 and earlier
affected
Versions 14.0.4 and earlier
affected
Versions 13.2.4 and earlier
affected
Default status
unaffected
Versions 2026.1.1 and earlier
affected
Description
When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin does not perform validation when copying the abnormal string, causing the application to crash.
Problem types
Buffer Copy without Checking Size of Input (CWE-120)
Product status
Versions 2026.1.1 and earlier
Versions 14.0.4 and earlier
Versions 13.2.4 and earlier
Versions 2026.1.1 and earlier
Credits
XuPeng
References
www.foxit.com/support/security-bulletins.html