CVE-2021-40420

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

CVE-2021-40420

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

Memory corruption

A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lead to memory corruption and arbitrary...

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

CVE-2021-40420

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

CVE-2021-40420

Technical details for CVE-2021-40420 are not publicly available in the provided documents; monitor for updates.

CVE-2022-22150

A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lead to memory corruption and arbitrary...

CVE-2022-22150

Foxit PDF Reader 11.1.0.52543 contains a memory corruption flaw in its JavaScript engine triggered by a specially crafted PDF. The vulnerability can lead to memory corruption and arbitrary code execution. Exploitation requires user action (opening a malicious PDF or visiting a crafted site) and, ...

CVE-2021-40420: Use After Free

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the...

PT-2022-6132

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 11.1.0.52543 Description A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. This vulnerability can be triggered by a specially-crafted PDF document, leading to the reuse of...

CVE-2022-22150: Improper Cleanup on Thrown Exception

A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception which is improperly handled, leaving the engine in an invalid state, which can lead to memory corruption and arbitrary...

PT-2022-1591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 98.0.4758.80 Description The issue is related to an out of bounds memory access in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This...

PT-2022-6199

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 11.1.0.52543 Description A memory corruption issue exists in the JavaScript engine of Foxit PDF Reader. This issue can be triggered by a specially-crafted PDF document, causing an exception that is improperly handled a...

Denial of Service (DoS)

Overview bignum is an Arbitrary precision integral arithmetic for Node.js using OpenSSL. This library is based on node-bigint by substack, but instead of using libgmp, it uses the builtin bignum functionality provided by OpenSSL. The advantage is that OpenSSL is already part of Node.js, so this...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09153)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Resource Management Error Vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS resource management error vulnerability, no details of the vulnerability are currently provided...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09549)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09548)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09154)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09545)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...