CVE-2020-26534

2020-10-0208:02:15

mitre

www.cve.org

foxit reader

phantompdf

use-after-free

acroform

javascript

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

65.9%

JSON

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution.

References

www.foxitsoftware.com/support/security-bulletins.html