First published: Fri Oct 02 2020(Updated: )
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Foxitsoftware Foxit Reader | <10.1 | |
Foxitsoftware Phantompdf | <10.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-26536 is an issue discovered in Foxit Reader and PhantomPDF before version 10.1, which can cause a NULL pointer dereference when processing a malicious PDF document.
CVE-2020-26536 has a severity score of 5.5, which is considered medium.
Foxit Reader and PhantomPDF versions before 10.1 are affected by CVE-2020-26536.
To fix CVE-2020-26536, you should update Foxit Reader and PhantomPDF to version 10.1 or later.
More information about CVE-2020-26536 can be found at the following reference: https://www.foxitsoftware.com/support/security-bulletins.html