CVE-2026-57240
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The vulnerability occurs when the application opens a PDF file and JavaScript deletes the PDF fields, but the subsequent logic still uses the old field pointers, resulting in invalid pointer references and causing the application to crash.
Risk Assessment
The risk involves an attacker potentially causing a denial of service (DoS) by crafting a malicious PDF file that triggers the crash, leading to service disruption and possible data loss.
Recommendation
It is recommended to immediately update the application to the latest version that includes a fix for the improper pointer management after PDF field deletion.
Original NVD description (English source)
When the application opens a PDF file and JavaScript deletes the PDF fields, the subsequent logic still uses the old field pointers, resulting in invalid pointer references and causing the application to crash.