Skip to content
OpenAdvisories
Unscored CVE-2020-12247 EUVD-2020-4561GHSA-vwrv-8g78-c37j

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds…

Published Sep 4, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information from an out-of-bounds read because a text-string index continues to be used after splitting a string into two parts. A crash may also occur.

References