KLA12126 ACE vulnerability in Foxit Reader

An out of bounds read vulnerability was found in Foxit Reader. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

Foxit Security Bulletins

Related products

Foxit-Reader

CVE list

CVE-2021-27270 critical

Solution

Update to the latest version

Download Foxit Reader

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Foxit Reader earlier than 10.1.3