CVE-2019-14212 — NULL Pointer Dereference in Phantompdf

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.0%
top 85.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Foxitsoftware Phantompdf
Timeline
PublishedJul 21
Latest updateMay 24

Description

An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

Patches

Patch: www.foxitsoftware.com ↗Patch: www.foxitsoftware.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-99pp-3735-vg8v: An issue was discovered in Foxit PhantomPDF before 8↗2022-05-24
▶
CVEList
CVE-2019-14212: An issue was discovered in Foxit PhantomPDF before 8↗2019-07-21
▶
CVE-2019-14212 — NULL Pointer Dereference in Phantompdf | cvebase