CVE-2022-27359 — NULL Pointer Dereference in PDF Editor

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 62.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Foxit PDF EditorFoxit PDF Reader
Timeline
PublishedMay 5
Latest updateMay 6

Description

Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a this.maildoc NULL pointer dereference.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDfoxit/pdf_editor< 12.0.1
▶NVDfoxit/pdf_reader< 12.0.1

🔴Vulnerability Details

2
GHSA
GHSA-h455-wjc2-8927: Foxit PDF Reader v11↗2022-05-06
▶
CVEList
CVE-2022-27359: Foxit PDF Reader before 12↗2022-05-05
▶
CVE-2022-27359 — NULL Pointer Dereference in PDF Editor | cvebase