CVE-2018-20249 In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may resu...
HighCVSS 8.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foxitsoftware quick pdf library | < 16.12 | 16.12 |
References
- 106306 third-party-advisory vdb-entry
- www.foxitsoftware.com vendor-advisory