PT-2022-17080 · Foxit · Phantompdf+1

Published 2022-03-07 · Updated 2022-03-14 · CVE-2022-25108

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader and Editor versions prior to 11.2.1 PhantomPDF versions prior to 10.1.7

Description The issue arises from a NULL pointer dereference that occurs during PDF parsing. This happens because a pointer is used without proper validation, leading to a potential crash or other unintended behavior.

Recommendations For Foxit PDF Reader and Editor versions prior to 11.2.1, update to version 11.2.1 or later. For PhantomPDF versions prior to 10.1.7, update to version 10.1.7 or later.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-25108

Affected Products

Foxit Pdf Reader/Editor

Phantompdf

References · 3

• https://osv.dev/vulnerability/CVE-2022-25108 · Vendor Advisory
• https://foxit.com/support/security-bulletins.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25108 · Security Note