CVE-2019-14209

An issue was discovered in Foxit PhantomPDF before 8.3.10

published July 21, 2019

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

⚠️ Heap corruption might sound scary, but this one’s hiding in plain sight! In Foxit PhantomPDF versions before 8.3.10, an issue sneaks in when adding AcroForms. 💻 Think of it like a waiter trying to take an order from several tables at once, leading to a mix-up in the kitchen. The disorganization can cause the system to serve a completely incorrect dish – or in this case, corrupt data. If exploited, this heap corruption could lead to unexpected behavior or crashes in the application, affecting your workflows. While it doesn't seem to be actively exploited, the potential for data loss or disruption is definitely not something to overlook.

Put simply

Think of it like a waiter trying to take an order from several tables at once, leading to a mix-up in the kitchen. The disorganization can cause the system to serve a completely incorrect dish – or in this case, corrupt data. This vulnerability occurs due to a data desynchrony when adding AcroForms, leading to heap corruption in Foxit PhantomPDF prior to version 8.3.10. This can cause various issues in the application's performance.

What to do

If exploited, this heap corruption could lead to unexpected behavior or crashes in the application, affecting your workflows. While it doesn't seem to be actively exploited, the potential for data loss or disruption is definitely not something to overlook. To protect yourself, upgrade Foxit PhantomPDF to version 8.3.10 or later. Regularly check for updates and ensure your software is always running the latest version to avoid vulnerabilities. You've got this! Just follow these steps, and you'll keep your PDF documents safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01896 · 79.5th percentile
Published
2019-07-21T18:17Z
EPSS history
Timeline
  • 21 JUL 18:17Z
    An issue was discovered in Foxit PhantomPDF before 8.3.10
    cvelistv5