CVE-2021-21870

published 2021-08-05

CVE-2021-21870: A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A specially crafted PDF document can…

high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.4.37651. A specially crafted PDF document can trigger the reuse of previously free memory, which can lead to arbitrary code execution. An attacker needs to trick the user into opening a malicious file or site to trigger this vulnerability if the browser plugin extension is enabled.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
foxit	pdf_reader	—	—

CWE-416