CVE-2020-26539
EUVD-2020-1908402.10.2020, 08:15
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field dictionaries), a use-after-free can occur with resultant remote code execution (or an information leak).Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| foxitsoftware | foxit_reader | 𝑥 < 10.1 |
| foxitsoftware | phantompdf | 𝑥 < 10.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration