CVE-2020-26535: Critical severity foxit reader vulnerability
Published Oct 2, 2020
·Updated
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation (and read access violation).
Affected Software
2 affected components
Foxitsoftware Foxit Reader<10.1
Foxitsoftware Phantompdf<10.1
Remediation
Event History
Oct 2, 2020
CVE Published
via MITRE·08:01 AM
Data Sourced
via MITRE·08:01 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2020-26535.
2
What is the severity of CVE-2020-26535?
The severity of CVE-2020-26535 is critical.
3
Which software versions are affected by CVE-2020-26535?
Foxit Reader and PhantomPDF versions before 10.1 are affected.
4
How can I fix the vulnerability CVE-2020-26535?
Update Foxit Reader and PhantomPDF to version 10.1 or later.
5
Where can I find more information about CVE-2020-26535?
More information about CVE-2020-26535 can be found at the following link: [https://www.foxitsoftware.com/support/security-bulletins.html](https://www.foxitsoftware.com/support/security-bulletins.html).