CVE-2010-20010CWE-121

Foxit PDF Reader < 4.2.0.0928 Title Stack Buffer Overflow

High · published August 20, 2025

CVSS v4.0
8.4
EPSS
0%
Percentile
33.6
In the wild
Unconfirmed
What it is

Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A specially crafted PDF with an overlong Title string can overflow a fixed-size stack buffer, corrupt the Structured Exception Handler (SEH) chain, and lead to arbitrary code execution in the context of the user who opens the file.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00405 · 33.6th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-08-20T16:34Z
EPSS history
Timeline
  • 20 AUG 16:34Z
    Foxit PDF Reader < 4.2.0.0928 Title Stack Buffer Overflow
    cvelistv5