CVE-2018-20249

8.8 highEPSS 1.4%

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-787
Published: 2018-12-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

foxitsoftware:quick_pdf_library

References

http://www.securityfocus.com/bid/106306
https://www.foxitsoftware.com/support/security-bulletins.php
http://www.securityfocus.com/bid/106306
https://www.foxitsoftware.com/support/security-bulletins.php

Check your stack JSON