CVE-2026-57249

HighCVSS 7.8

Published: 08/07/2026(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

A vulnerability in a PDF viewing application causes a crash after opening a PDF file. The script resets the annotation state and triggers a form reset event, leading to access of invalid objects and application crash.

Risk Assessment

An attacker can provide a specially crafted PDF file that, when opened, crashes the application, resulting in a denial of service (DoS) for the user.

Recommendation

It is recommended to update the application to the latest version that includes a fix for the invalid object access error during form reset.

Other vulnerabilities in PDFViewer

CVE-2026-57240High
The vulnerability occurs when the application opens a PDF file and JavaScript deletes the PDF fields, but the subsequent logic still uses the old field pointers, resulting in invalid pointer references and causing the application to crash.

Original NVD description (English source)

After the application opened the PDF file, the script first reset the annotation status, then triggered the reset form event by additional action. During the re-entry process, the application access invalid objects and crashed.