CVE-2021-31461

Foxit Reader 10.1.1.37576 is affected by a type-confusion vulnerability in the handling of app.media objects. The flaw stems from insufficient validation of user-supplied data, enabling remote attackers to execute arbitrary code in the target process after the user visits a malicious page or open...

CVE-2021-31473

CVE-2021-31473 describes a remote code execution in Foxit Reader 10.1.3.37598. The issue, tied to the browseForDoc function, arises from improper validation of user-supplied data that can cause a write past the end of an allocated data structure. This allows an attacker to execute code in the tar...

CVE-2018-20315

CVE-2018-20315 affects Foxit Reader prior to 9.5 and Foxit PhantomPDF prior to 8.3.10 or 9.x prior to 9.5. A race condition in these products can lead to a stack-based buffer overflow or an out-of-bounds read. The available documents identify the vulnerable components and the underlying issue but...

CVE-2021-31456

CVE-2021-31456 affects Foxit Reader 10.1.1.37576 and describes remote code execution via the handling of Annotation objects. The root cause is the lack of validating the existence of an object before performing operations on it, enabling an attacker to run code in the context of the current proce...

CVE-2021-31458

Foxit Reader 10.1.1.37576 is affected by a remote code execution vulnerability in the handling of Annotation objects. The issue arises from not validating the existence of an object before performing operations on it, allowing an attacker to run code in the current process context after the targe...

CVE-2018-20311

CVE-2018-20311 affects Foxit Reader before 9.5 and Foxit PhantomPDF before 8.3.10 and 9.x before 9.5. The issue is a proxyCPDFAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read. The description does not specify affected versions beyond those ranges or expl...

CVE-2021-31460

CVE-2021-31460 is a Foxit Reader 10.1.1.37576 remote code execution vulnerability. The flaw occurs in XFA template processing and stems from not validating the existence of an object before performing operations on it, enabling code execution in the attacker’s context after user interaction (e.g....

CVE-2018-20309

CVE-2018-20309 affects Foxit Reader prior to 9.5 and PhantomPDF prior to 8.3.10, plus 9.x builds prior to 9.5. The issue is a race condition in the proxyGetAppEdition path that can cause a stack-based buffer overflow or an out‑of‑bounds read. Impact is described in the CVE as memory corruption wi...

CVE-2021-31459

Foxit Reader 10.1.1.37576 is affected by a vulnerability in XFA Forms where code paths operate on an object without validating its existence, enabling remote code execution. Exploitation requires user interaction (viewing a malicious page or opening a malicious file). The root cause is a lack of ...

CVE-2018-20313

Foxit Reader before 9.5 and PhantomPDF before 8.3.10 and 9.x before 9.5 are affected by a race condition in proxyPreviewAction that can cause a stack-based buffer overflow or an out-of-bounds read. The vulnerability is due to improper synchronization in the proxy action handling, enabling memory ...

CVE-2018-20310

The connected CNVD-2021-04398 describes a vulnerability affecting Foxit Reader and Foxit PhantomPDF where a race condition can lead to a stack buffer overflow or an out-of-bounds read. The CVE-2018-20310 entry itself identifies Foxit Reader before 9.5 and PhantomPDF before 8.3.10 and 9.x before 9...

CVE-2018-20312

Affected software: Foxit Reader before 9.5; PhantomPDF before 8.3.10 and 9.x before 9.5. Root cause: a proxyDoAction race condition. Consequence: could cause a stack-based buffer overflow OR an out-of-bounds read. No remediation or exploitation status provided in the supplied documents.

CVE-2018-20316

CVE-2018-20316 concerns Foxit Reader prior to 9.5 and PhantomPDF prior to 8.3.10 and 9.x prior to 9.5, where a proxyDoAction race condition can lead to a stack-based buffer overflow or an out-of-bounds read. This race condition is the underlying issue differentiating it from CVE-2018-20310 (diffe...

CVE-2021-31457

Foxit Reader 10.1.1.37576 is affected by a code execution vulnerability in the handling of Annotation objects. The issue stems from failing to validate the existence of an object before performing operations, allowing an attacker to run arbitrary code in the current process when a user visits a m...

CVE-2018-20314

CVE-2018-20314 affects Foxit Reader before 9.5 and PhantomPDF before 8.3.10 (and 9.x before 9.5). The underlying issue is a proxyCheckLicence race condition that can lead to a stack-based buffer overflow or an out-of-bounds read. Impacted products include Foxit Reader/PhantomPDF, with potential f...