CVE-2021-38573

No fix known EPSS 1%

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.

Published 2021-08-11 · CVE record · OSV

Products: foxitsoftware foxit_reader, foxitsoftware phantompdf