PT-2021-22218 · Foxit · Foxit Reader+1

Published 2021-08-11 · Updated 2021-08-12 · CVE-2021-38569

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Foxit Reader and PhantomPDF versions prior to 10.1.4

Description An issue was discovered that allows stack consumption via recursive function calls during the handling of XFA forms or link objects.

Recommendations For Foxit Reader and PhantomPDF versions prior to 10.1.4, update to version 10.1.4 or later to resolve the issue.

Fix

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

CVE-2021-38569

Affected Products

Foxit Reader

Phantompdf

References · 3

• https://osv.dev/vulnerability/CVE-2021-38569 · Vendor Advisory
• https://foxitsoftware.com/support/security-bulletins.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38569 · Security Note