CVE-2020-27857

Foxit Studio Photo 3.6.6.922 is affected by CVE-2020-27857 due to an out-of-bounds write during NEF file parsing, allowing remote code execution when a user opens a malicious file or visits a crafted page. Root cause: improper validation of user-supplied data leading to a write past the end of an...