CVE-2020-17411

CVE-2020-17411 affects Foxit PhantomPDF 10.0.0.35798. The flaw is in handling of U3D objects embedded in PDF files, caused by inadequate validation of user-supplied data, leading to an information-disclosure/out-of-bounds condition (read past end of an allocated object). Exploitation requires use...

CVE-2021-31467

CVE-2021-31467 - Foxit Reader U3D parsing out-of-bounds read : The affected product is Foxit Reader 10.1.3.37598. The root cause is a lack of proper validation during U3D file parsing embedded in PDF documents, causing an out-of-bounds read of an allocated object. This information-disclosure flaw...

CVE-2021-31463

CVE-2021-31463 affects Foxit Reader 10.1.3.37598. The vulnerability stems from improper validation in the handling of U3D objects embedded in PDF files, causing an out-of-bounds read that can disclose sensitive information. Exploitation requires user interaction (the target must open a malicious ...

CVE-2021-31464

CVE-2021-31464 affects Foxit Reader 10.1.3.37598 via U3D file parsing in PDFs. Root cause: lack of proper validation leads to an out-of-bounds read in embedded U3D handling, enabling information disclosure when a user opens a malicious file/page or visits a crafted page. Documented impact is info...

CVE-2021-31469

Foxit Reader 10.1.1.37576 contains an information-disclosure/ out-of-bounds vulnerability in the handling of U3D objects embedded in PDF files. The issue arises from insufficient validation of user-supplied data, allowing read past the end of an allocated object. Exploitation requires user intera...

CVE-2021-31462

Foxit Reader 10.1.3.37598 is affected by a U3D file parsing vulnerability that leads to information disclosure. The issue arises from improper validation of user-supplied data when handling embedded U3D objects in PDFs, allowing a read past the end of an allocated object. Exploitation requires us...