CRITICAL🇵🇱 Wersja polska

CVE-2021-38563

CVSS 9.8v3.1pub. 2021-08-11upd. 2024-11-21

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size (derived from a /Size entry) is smaller than the maximum indirect object number, and thus there is an attempted incorrect array access (leading to a NULL pointer dereference, or out-of-bounds read or write).

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Foxit Pdf Reader

    APP
    Foxit
    ≤ 11.0.0.0510

  • Foxitsoftware Pdf Editor

    APP
    Foxitsoftware
    ≤ 11.0.0.0510
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2022-24955CRITICAL9.8PL ✓same product

Foxit PDF Reader/Editor — niekontrolowana ścieżka wyszukiwania DLL (DLL hijacking)

CVE-2022-24954CRITICAL9.8PL ✓same product

Stack-Based Buffer Overflow w Foxit PDF Reader/Editor — XFA subform/draw

CVE-2021-38564CRITICAL9.1PL ✓same product

Out-of-bounds read w Foxit PDF Reader i PDF Editor via util.scand

CVE-2026-13126HIGH7.8PL ✓same product

Use-after-free w Foxit PDF Editor — crash przez błędny zapis na unieważnionym obiekcie

CVE-2026-13127HIGH7.8PL ✓same product

Use-after-free w Foxit PDF Editor — błąd miniatur stron po modyfikacji JS