CVE-2018-20316: Buffer Overflow
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Foxit Reader and PhantomPDF vulnerability?
The vulnerability ID is CVE-2018-20316.
What is the severity rating of CVE-2018-20316?
The severity rating of CVE-2018-20316 is high, with a rating of 8.1.
What software versions are affected by CVE-2018-20316?
Foxit Reader versions before 9.5 and PhantomPDF versions before 8.3.10 and 9.x before 9.5 are affected by CVE-2018-20316.
What is the vulnerability description of CVE-2018-20316?
CVE-2018-20316 is a proxyDoAction race condition vulnerability in Foxit Reader and PhantomPDF that can lead to a stack-based buffer overflow or out-of-bounds read.
Where can I find more information about CVE-2018-20316?
You can find more information about CVE-2018-20316 on the Foxit Software security bulletins page: https://www.foxitsoftware.com/support/security-bulletins.php