CVE-2021-31468

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31468

Foxit Reader 10.1.3.37598 contains a U3D file parsing vulnerability in PDFs that allows remote code execution. The flaw stems from missing validation of user-supplied data, causing an out-of-bounds read past an allocated object. Exploitation requires the user to open a malicious PDF (or visit a m...