CVE-2026-57237
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
The vulnerability in the PDF viewing application occurs when JavaScript modifies form field properties, causing the state of underlying objects referenced by the program to become invalid. This eventually leads to reading an illegal memory address and crashing the application.
Risk Assessment
An attacker can exploit this vulnerability to cause a denial of service (DoS) by opening a specially crafted PDF file, resulting in application hang or crash.
Recommendation
It is recommended to immediately update the application to a patched version and, if possible, disable JavaScript execution in PDF files.
Original NVD description (English source)
When the application opens a PDF and JavaScript modifies the properties of form fields, it causes the state of the underlying objects referenced by the program to become invalid. Eventually, it reads an illegal memory address, which leads to the crash of the application.