CVE-2018-20249

published 2018-12-24

CVE-2018-20249: In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile…

high 8.8 CVSS 3.0

AV N AC L PR N UI R S U C H I H A H

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
foxitsoftware	quick_pdf_library	< 16.12	16.12

CWE-787 CWE-119