CVE-2020-26537 An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color components in a color space. This causes a...
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color components in a color space. This causes an out-of-bounds write.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foxitsoftware foxit reader | < 10.1 | 10.1 |
| foxitsoftware phantompdf | < 10.1 | 10.1 |
References
- www.foxitsoftware.com patch vendor-advisory