Foxit PDF Reader and Foxit PDF Editor Out-of-Bounds Reading Vulnerability

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader and Foxit PDF Editor is a PDF editor. Versions prior to 11.0.1 have a security vulnerability that can be exploited to allow out-of-bounds reading via util.scan...

CVE-2021-38567

An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL pointer dereference, aka CNVD-C-2021-95204...

CVE-2021-38565

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm...

CVE-2021-38564

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand...

CVE-2021-38566

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes...

CVE-2021-38564

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand...

CVE-2021-38566

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes...

CVE-2021-38563

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size derived from a /Size entry is smaller than the maximum indirect object number, and thus there is an attempted incorrect array access leading to a NULL pointer...

CVE-2021-38567

An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL pointer dereference, aka CNVD-C-2021-95204...

CVE-2021-38564

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand...

CVE-2021-38563

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size derived from a /Size entry is smaller than the maximum indirect object number, and thus there is an attempted incorrect array access leading to a NULL pointer...

Design/Logic Flaw

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand...

Null pointer dereference

An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL pointer dereference, aka CNVD-C-2021-95204...

CVE-2021-38563

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size derived from a /Size entry is smaller than the maximum indirect object number, and thus there is an attempted incorrect array access leading to a NULL pointer...

CVE-2021-38563

Foxit PDF Reader and Foxit PDF Editor are affected by CVE-2021-38563 (pre-11.0.1). The issue arises when an array size derived from a /Size entry is smaller than the maximum indirect object number, causing an incorrect array access that can dereference NULL or read/write out of bounds. Impact can...

CVE-2021-38564

CVE-2021-38564 affects Foxit PDF Reader before 11.0.1 and Foxit PDF Editor before 11.0.1. The issue is an out-of-bounds read via util.scand/scand, disclosed across multiple sources. Root cause is improper handling leading to an out-of-bounds read, with impact described as partial confidentiality ...

CVE-2021-38564

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand...

CVE-2021-38565

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm...

CVE-2021-38565

The CVE-2021-38565 entry concerns Foxit PDF Reader before 11.0.1 and Foxit PDF Editor before 11.0.1. The vulnerability allows writing to arbitrary files via the submitForm function, indicating an arbitrary file write flaw in these products. Connected sources consistently identify the affected sof...

CVE-2021-38566

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes...