CVE-2020-26535

An issue was discovered in Foxit Reader and PhantomPDF before 10.1

published October 2, 2020

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

⚠️ A wayward thread allocation could lead to unexpected crashes in Foxit Reader! Imagine your computer's like a crowded restaurant where a waiter can't find the right table — chaos ensues! 🍽️ In this case, the thread local storage allocation is like a waiter trying to serve a dish to a customer that doesn't exist. If the waiter ends up at a table with no one there, the whole dining experience can go downhill fast! If exploited, this flaw could cause crashes or unintended behavior in Foxit Reader and PhantomPDF, potentially leaving users frustrated as their documents disappear unexpectedly. While it's not a direct breach of data, the inconvenience of lost work could be absolutely devastating!

Put simply

In this case, the thread local storage allocation is like a waiter trying to serve a dish to a customer that doesn't exist. If the waiter ends up at a table with no one there, the whole dining experience can go downhill fast! This vulnerability occurs when TslAlloc attempts to allocate thread local storage but receives an unacceptable index value, leading to a write access violation. Essentially, it mishandles memory space, which can cause the application to crash.

What to do

If exploited, this flaw could cause crashes or unintended behavior in Foxit Reader and PhantomPDF, potentially leaving users frustrated as their documents disappear unexpectedly. While it's not a direct breach of data, the inconvenience of lost work could be absolutely devastating! To mitigate this issue, ensure you update Foxit Reader or PhantomPDF to version 10.1 or later. Regularly check for software updates to improve security and stability. Don't leave your documents high and dry! You've got this! With these updates, you'll have your systems running smoothly and securely in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01717 · 77.3th percentile
Published
2020-10-02T08:01Z
EPSS history
Timeline
  • 02 OCT 08:01Z
    An issue was discovered in Foxit Reader and PhantomPDF before 10.1
    cvelistv5