CVE-2020-28203

published 2020-12-15

CVE-2020-28203: An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file…

medium 5.5 CVSS 3.1

AV L AC L PR N UI R S U C N I N A H

An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file, leading the application to crash (denial of service).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
foxitsoftware	foxit_reader	< 10.1.0.37527	10.1.0.37527
foxitsoftware	phantompdf	< 10.1.0.37527	10.1.0.37527

CWE-476