CVE-2018-17781

No fix known EPSS 2%

Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.

Published 2018-09-29 · CVE record · OSV

Products: foxitsoftware phantompdf, foxitsoftware reader