Skip to content
OpenAdvisories
High · 8.0 CVE-2018-3940 EUVD-2018-15726GHSA-mmqm-wj2w-f634

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially…

Published Oct 8, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused. An attacker needs to trick the user to open the malicious file to trigger.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit PDF Reader 9.1.0.5096 —

References