What is CVE-2023-32616?

CVE-2023-32616 is a use-after-free vulnerability in Foxit Reader 12.1.2.15356 that can lead to memory corruption and arbitrary code execution.

How does CVE-2023-32616 affect Foxit Reader?

CVE-2023-32616 affects Foxit Reader 12.1.2.15356 by allowing a specially crafted malicious PDF document to trigger memory corruption when handling 3D annotations.

What is the severity of CVE-2023-32616?

CVE-2023-32616 has a severity rating of 8.8, which is considered high.

How can CVE-2023-32616 be exploited?

CVE-2023-32616 can be exploited by including a specially crafted Javascript code inside a malicious PDF document.

Is there a fix for CVE-2023-32616?

Foxit Software has not released a fix for CVE-2023-32616 at the time of writing this FAQ.

Vulnerability/
CVE-2023-32616

high

8.8

CWE

416

27/11/2023

2/8/2024

CVE-2023-32616: Use After Free

First published: Mon Nov 27 2023(Updated: )

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF document can trigger reuse of a previously freed object, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.

Credit: talos-cna@cisco.com

Affected Software	Affected Version	How to fix
Foxitsoftware Foxit Reader	=12.1.2.15356

Never miss a vulnerability like this again

Reference Links

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1837

Frequently Asked Questions

What is CVE-2023-32616?
CVE-2023-32616 is a use-after-free vulnerability in Foxit Reader 12.1.2.15356 that can lead to memory corruption and arbitrary code execution.
How does CVE-2023-32616 affect Foxit Reader?
CVE-2023-32616 affects Foxit Reader 12.1.2.15356 by allowing a specially crafted malicious PDF document to trigger memory corruption when handling 3D annotations.
What is the severity of CVE-2023-32616?
CVE-2023-32616 has a severity rating of 8.8, which is considered high.
How can CVE-2023-32616 be exploited?
CVE-2023-32616 can be exploited by including a specially crafted Javascript code inside a malicious PDF document.
Is there a fix for CVE-2023-32616?
Foxit Software has not released a fix for CVE-2023-32616 at the time of writing this FAQ.

collector/nvd-api
agent/author
agent/severity
agent/references
agent/type
agent/weakness
agent/description
agent/event
agent/tags
agent/last-modified-date
agent/first-publish-date
agent/softwarecombine
collector/mitre-cve
source/MITRE
vendor/foxitsoftware
canonical/foxitsoftware foxit reader
version/foxitsoftware foxit reader/12.1.2.15356

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.