CVE-2018-20249
In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - cve@checkpoint.com
- Published
- 2018-12-24
- Last modified
- 2024-08-05
- Weaknesses
- CWE-119, CWE-787
Affected products
References
- http://www.securityfocus.com/bid/106306
- https://www.foxitsoftware.com/support/security-bulletins.php
