Out-of-Bounds Read and Heap Overflow in Foxit Reader and PhantomPDF
CVE-2019-6985

8.8HIGH

Key Information:

Vendor

Foxit
Status
3d
Vendor
CVE Published:
3 October 2022

What is CVE-2019-6985?

An issue in Foxit 3D Plugin Beta allows attackers to exploit certain PDF files with specially crafted 3D content, potentially leading to an Out-of-Bounds Read or a Heap Overflow. This vulnerability could cause the application to crash during the processing of such documents, resulting in application instability and the potential for further exploitation.

References

https://www.foxitsoftware.com/support/security-bulletins.php
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.