CVE-2026-57248
High · 7.8CVSS
7.8
EPSS
—
Published
Jul 8, 2026
CISA due date
—
The record
When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument checks. As a result, due to the damage to the internal structure of the annotations, it causes the application to crash during subsequent release.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-112893 Pillow is a Python imaging library. CWE-763
- CVE-2026-98160 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs… CWE-763
- CVE-2026-74860 A flaw was found in libxml2 with Python bindings enabled. CWE-763
- CVE-2026-84131 Privilege escalation due to invalid pointer in the Graphics component. CWE-763
- CVE-2023-20511 Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a… CWE-763
- CVE-2026-19315 A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a… CWE-763
- CVE-2026-74947 Privilege escalation due to invalid pointer in the Graphics component. CWE-763
- CVE-2026-9516 Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM… CWE-763