CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2019-20819
High (7.5) in foxitsoftware. EPSS 1.6% chance of exploitation in the next 30 days.
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-674
- Published
- Modified
- Record from
- the NVD, synced
Affected
- foxitsoftware:phantompdf
- foxitsoftware:reader