Out-of-Bounds Write in Foxit Reader and PhantomPDF Products
CVE-2020-26537
9.8CRITICAL
Summary
A vulnerability exists in Foxit Reader and PhantomPDF prior to version 10.1, where an incorrect Shading calculation results in an unequal number of outputs compared to the color components in a color space. This discrepancy leads to an out-of-bounds write, potentially allowing an attacker to disrupt the normal functioning of the affected application or execute arbitrary code.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved