CVE-2021-38566

published 2021-08-11

CVE-2021-38566: An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML…

Priority P3 35 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
foxitsoftware	pdf_editor	< 11.0.1	11.0.1
foxitsoftware	pdf_reader	< 11.0.1	11.0.1

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-674 CWE-400