CVE-2019-14212

7.5 highEPSS 2.2%

High (7.5) in foxitsoftware phantompdf. EPSS 2.2% chance of exploitation in the next 30 days.

An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2019-07-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

foxitsoftware:phantompdf

References

http://www.securityfocus.com/bid/109313
https://www.foxitsoftware.com/support/security-bulletins.php
http://www.securityfocus.com/bid/109313
https://www.foxitsoftware.com/support/security-bulletins.php

Check your stack JSON