CVE-2022-25108 — NULL Pointer Dereference in PDF Editor

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 62.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Foxit PDF EditorFoxit PDF Reader
Timeline
PublishedMar 10
Latest updateMar 11

Description

Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without proper validation.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDfoxit/pdf_editor11.0 — 11.2.1+1
▶NVDfoxit/pdf_reader< 11.2.1

🔴Vulnerability Details

2
GHSA
GHSA-r76r-59x7-cv24: Foxit PDF Reader and Editor before 11↗2022-03-11
▶
CVEList
CVE-2022-25108: Foxit PDF Reader and Editor before 11↗2022-03-07
▶
CVE-2022-25108 — NULL Pointer Dereference in PDF Editor | cvebase