CVE-2022-24954

published 2022-02-11

CVE-2022-24954: Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
foxit	pdf_editor	<= 10.1.6.37749	—
foxit	pdf_editor	11.0.1.0719 – 11.2.0.53415	—
foxit	pdf_reader	<= 11.1.0.52543	—

CWE-787