CVE-2019-20814: Allocation of Resources Without Limits or Throttling

An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level...

CVE-2019-20836: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive...

CVE-2018-21240: Uncontrolled Resource Consumption

An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer0xfffffffe call...

CVE-2019-20821: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF Mac before 3.4. It has a NULL pointer dereference...

CVE-2019-20830: Out-of-bounds Write

An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used...

PT-2020-10779

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.12 Description An issue in the XML parsing functionality allows stack consumption via nested function calls. Recommendations For versions prior to 8.3.12, update to version 8.3.12 or later to resolve the...

CVE-2020-13807: Loop with Unreachable Exit Condition

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop...

CVE-2020-13814: Use After Free

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It has a use-after-free via a document that lacks a dictionary...

CVE-2019-20820: NULL Pointer Dereference

An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference during the parsing of file data...

CVE-2019-20813: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference...

CVE-2019-20835: Undefined Security Weakness

An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling...

CVE-2018-21243: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used...

CVE-2019-20823: Buffer Copy without Checking Size of Input

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs...

CVE-2019-20816: NULL Pointer Dereference

An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data...

PT-2020-10799

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 Foxit PhantomPDF versions prior to 9.5 Description An issue was discovered that involves homograph mishandling. Recommendations For Foxit Reader versions prior to 9.5, update to version 9.5 or later. For Foxi...

CVE-2019-20825: Out-of-bounds Write

An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used...

PT-2020-10801

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 9.5 Description An issue allows signature validation bypass via a modified file or a file with non-standard signatures. Recommendations For Foxit Reader and PhantomPDF versions prior to 9.5, update...

CVE-2020-13803: Improper Verification of Cryptographic Signature

An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures...

CVE-2020-13806: Use After Free

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation...

PT-2020-10800

Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.5 Foxit PhantomPDF versions prior to 9.5 Description The issue concerns the mishandling of cloud credentials, specifically demonstrated with Google Drive. Recommendations For Foxit Reader versions prior to 9.5,...