What is GHSA-pmw8-7x25-6jmx?

GHSA-pmw8-7x25-6jmx is a security advisory published by GitHub Security Advisories with High severity. Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata...

Which CVE IDs does GHSA-pmw8-7x25-6jmx cover?

GHSA-pmw8-7x25-6jmx covers the following CVE IDs: CVE-2026-91795. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pmw8-7x25-6jmx?

GHSA-pmw8-7x25-6jmx has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-pmw8-7x25-6jmxHighCVSS 7.8

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-91795 →

📋 Description

Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-91795
https://www.foxit.com/support/security-bulletins.html
https://github.com/advisories/GHSA-pmw8-7x25-6jmx