Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-8454

No fix known EPSS 4%

Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.

Published 2017-05-03 · CVE record · OSV

Products: foxitsoftware foxit_reader, foxitsoftware phantompdf