Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

CVE-2021-34949

What is CVE-2021-34949?

A notable vulnerability in Foxit PDF Reader arises from the improper handling of Annotation objects, which can lead to an Out-Of-Bounds Read condition. This issue permits remote attackers to potentially disclose sensitive information from affected installations. User interaction is a prerequisite for exploitation; victims must be lured into visiting malicious websites or opening specially crafted PDF files. The flaw stems from insufficient validation of user-supplied data, potentially enabling attackers to read beyond the expected boundaries of the allocated memory. Exploiting this vulnerability in conjunction with other weaknesses may allow further actions, including the execution of arbitrary code within the compromised environment.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References