CVE-2018-21239: Insufficiently Protected Credentials

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...

CVE-2018-21238: Uncontrolled Resource Consumption

An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2019-20814: Allocation of Resources Without Limits or Throttling

An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level...

CVE-2019-20828: Buffer Copy without Checking Size of Input

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...

CVE-2019-20834: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2019-20831: Undefined Security Weakness

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.5.0.20733. It has void data mishandling, causing a crash...

CVE-2019-20818: Allocation of Resources Without Limits or Throttling

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level...

CVE-2019-20815: Uncontrolled Recursion

An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing...

CVE-2019-20822: Out-of-bounds Write

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...

CVE-2019-20820: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...

CVE-2019-20816: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data...

CVE-2019-20823: Buffer Copy without Checking Size of Input

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...

CVE-2019-20813: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference...

CVE-2019-20835: Undefined Security Weakness

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling...

CVE-2019-20832: Undefined Security Weakness

An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling...

CVE-2019-20826: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF Mac 3.3 and Foxit Reader for Mac before 3.3. It has a NULL pointer dereference...

CVE-2019-20817: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference...

CVE-2019-20819: Uncontrolled Recursion

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing...

CVE-2019-20836: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive...

CVE-2019-20829: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYSwcslen in an Epub file...