CRITICAL🇬🇧 English

CVE-2021-38563

CVSS 9.8v3.1pub. 2021-08-11upd. 2024-11-21

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size (derived from a /Size entry) is smaller than the maximum indirect object number, and thus there is an attempted incorrect array access (leading to a NULL pointer dereference, or out-of-bounds read or write).

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Foxit Pdf Reader

    APP
    Foxit
    ≤ 11.0.0.0510
  • Foxitsoftware Pdf Editor

    APP
    Foxitsoftware
    ≤ 11.0.0.0510
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2022-24955CRITICAL9.8ten sam produkt

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for...

CVE-2022-24954CRITICAL9.8ten sam produkt

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related t...

CVE-2021-38564CRITICAL9.1ten sam produkt

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bo...

CVE-2026-5940HIGH7.8ten sam produkt

Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated o...

CVE-2026-5941HIGH7.8ten sam produkt

Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed...