CVE-2018-20248: Buffer Overflow
First published: Mon Dec 24 2018(Updated: )
In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref table pointers or invalid xref table data using the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.
Credit: cve@checkpoint.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Foxit Quick PDF Library | <16.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-20248?
CVE-2018-20248 has been classified with a high severity due to the potential for access violations resulting from processing malicious PDF files.
How do I fix CVE-2018-20248?
To fix CVE-2018-20248, upgrade to Foxit Quick PDF Library version 16.12 or later.
What functions are affected by CVE-2018-20248?
CVE-2018-20248 specifically affects the LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile, and DAOpenFileReadOnly functions.
What can happen if CVE-2018-20248 is exploited?
Exploitation of CVE-2018-20248 could result in access violations and potentially allow an attacker to execute arbitrary code.
Which versions of Foxit Quick PDF Library are vulnerable to CVE-2018-20248?
All versions of Foxit Quick PDF Library prior to 16.12 are vulnerable to CVE-2018-20248.
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/last-modified-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/foxitsoftware
- canonical/foxit quick pdf library