CVE-2020-17433

Foxit Studio Photo vulnerable in CMP file parsing leading to an out-of-bounds read in Foxit Studio Photo 3.6.6.922 (and affected earlier versions per CNVD). The flaw arises from insufficient validation of user-supplied data, allowing an attacker to read past the end of an allocated structure and ...

CVE-2021-31435

Foxit Studio Photo 3.6.6.931 is affected by a CMP file parsing vulnerability caused by uninitialized memory access, enabling remote code execution. Exploitation requires user interaction (e.g., visiting a malicious page or opening a malicious file). The issue is documented across multiple sources...

CVE-2020-17422

Foxit Studio Photo information disclosure (CVE-2020-17422) stems from improper validation in EPS file parsing, causing an out-of-bounds read of an allocated structure. Affected versions include Foxit Studio Photo 3.6.6.x; an attacker must lure a user to open a malicious page/file, enabling inform...

CVE-2021-31437

Foxit Studio Photo 3.6.6.931 contains an out-of-bounds write in JP2 file parsing due to insufficient input validation, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is documented by ZDI (ZDI-21-480). No re...