Vulnerability · Published Apr 1, 2026 · Assigned by Foxit

CVE-2026-3776Null pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation

Medium 5.5

In plain English

A medium-severity null pointer dereference in Foxit PDF Editor from Foxit Software Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.1%top 98.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources. When a PDF contains a stamp annotation missing its AP entry, the code continues to dereference the associated object without a prior null or validity check, which allows a crafted document to trigger a null pointer dereference and crash the application, resulting in denial of service.

Affected products (as reported)

Vendor	Product	Versions
Foxit Software Inc.	Foxit PDF Editor	Versions 2025.3 and earlierVersions 14.0.2 and earlierVersions 13.2.2 and earlier
Foxit Software Inc.	Foxit PDF Reader	Versions 2025.3 and earlier

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

https://www.foxit.com/support/security-bulletins.html