Foxit, Lib Raw vulnerabilities

Summary: Cisco Talos disclosed one Foxit Reader vulnerability and six LibRaw vulnerabilities, all of which have been patched by their respective vendors. The Foxit flaw, CVE-2026-3779, is a use-after-free in Array object handling that a malicious PDF's JavaScript can trigger for memory corruption and arbitrary code execution, while the six LibRaw issues comprise four heap-based buffer overflows and two integer overflows triggered by crafted files.
Why it matters: The Foxit bug requires only that a user open a malicious PDF, and the LibRaw flaws sit in a library used to process RAW camera files, so the exposure runs through the documents and images your users already handle routinely.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-20884 CVE-2026-20889 CVE-2026-20911 CVE-2026-21413 CVE-2026-24450 CVE-2026-24660 CVE-2026-3779
Related: Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug Cyber Risks ·
⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026