VULNERABILITY INTELLIGENCE

CVE-2026-13129

CVSS score7.8 HIGH
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-07-08
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

When the application opens a PDF file, JavaScript uses the damaged field tree to trigger field traversal, resulting in the program holding an invalid form object when accessing the field property path. Eventually, the application crashes due to reading an invalid pointer.

Weakness classification

  • 14984358-7092-470d-8f34-ade47a7658a2: CWE-416

Primary references