CVE catalog

CVE-2026-5942

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program.

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.18% · Oct 25, 2026

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated objects and crash the program.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpepdf_editorNot reported13.2.4fixed
Cpepdf_editorNot reported14.0.4fixed
Cpepdf_editorNot reported2026.1.1fixed
Cpepdf_readerNot reported2026.1.1fixed
Cpepdf_editorNot reported2026.1.1fixed
Cpepdf_readerNot reported2026.1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpepdf_editorcpeNot reported13.2.4Not reportedNot reportedNot reported
Cpepdf_editorcpeNot reported14.0.4Not reportedNot reportedNot reported
Cpepdf_editorcpeNot reported2026.1.1Not reportedNot reportedNot reported
Cpepdf_readercpeNot reported2026.1.1Not reportedNot reportedNot reported
Cpepdf_editorcpeNot reported2026.1.1Not reportedNVD-CVE-2026-5942Not reported
Cpepdf_readercpeNot reported2026.1.1Not reportedNVD-CVE-2026-5942Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References