CVE-2020-12248

No fix known EPSS 2%

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can execute arbitrary code via a heap-based buffer overflow because dirty image-resource data is mishandled.

Published 2020-09-04 · CVE record · OSV

Products: foxitsoftware phantompdf, foxitsoftware reader