CVE-2021-21870: Use After Free

Published Aug 5, 2021

Updated

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a malicious file or site to trigger this vulnerability if the browser plugin extension is enabled.

Affected Software

1 affected component

Foxit PDF Reader=10.1.4.37651

Event History

Aug 5, 2021

CVE Published

via MITRE·08:07 PM

Data Sourced

via MITRE·08:07 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-21870?

CVE-2021-21870 has a critical severity rating due to the potential for arbitrary code execution.

How do I fix CVE-2021-21870?

To fix CVE-2021-21870, update Foxit PDF Reader to the latest version provided by the vendor.

What versions of Foxit Reader are affected by CVE-2021-21870?

CVE-2021-21870 specifically affects Foxit Reader version 10.1.4.37651.

What type of vulnerability is CVE-2021-21870?

CVE-2021-21870 is a use-after-free vulnerability in the JavaScript engine of Foxit PDF Reader.

What can attackers achieve with CVE-2021-21870?

Attackers can execute arbitrary code on a victim's system by exploiting CVE-2021-21870 through a malicious PDF document.