CVE-2019-14209

9.8 criticalEPSS 1.9%

Critical (9.8) in foxitsoftware phantompdf. EPSS 1.9% chance of exploitation in the next 30 days.

An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2019-07-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

foxitsoftware:phantompdf

References

https://www.foxitsoftware.com/support/security-bulletins.php
https://www.foxitsoftware.com/support/security-bulletins.php

Check your stack JSON