CVE-2020-26537

An issue was discovered in Foxit Reader and PhantomPDF before 10.1

published October 2, 2020

CVSS
—
EPSS
1%
Percentile
66.6
In the wild
Unconfirmed
What it is

⚠️ An imbalance in color calculations is the heart of this bug! In Foxit Reader and PhantomPDF versions before 10.1, an out-of-bounds write could lead to unexpected results. 🎨 Think of it like a chef trying to mix ingredients for a cake without measuring them correctly—the batter could overflow and create a mess in the kitchen. Here, the miscalculation in shading outputs leaves a gap that could accidentally spill into memory. 🍰 This could potentially allow an attacker to cause software instability or unexpected behaviors, which, while not immediately catastrophic, could disrupt your workflow in frustrating ways. Imagine that sudden crash just as you're about to submit that important document!

Put simply

Think of it like a chef trying to mix ingredients for a cake without measuring them correctly—the batter could overflow and create a mess in the kitchen. Here, the miscalculation in shading outputs leaves a gap that could accidentally spill into memory. 🍰 The issue is rooted in a mismatch during shading calculations where the number of outputs doesn't align with the expected color components in the color space, resulting in an out-of-bounds write that could corrupt memory.

What to do

This could potentially allow an attacker to cause software instability or unexpected behaviors, which, while not immediately catastrophic, could disrupt your workflow in frustrating ways. Imagine that sudden crash just as you're about to submit that important document! To protect yourself, update to Foxit Reader or PhantomPDF version 10.1 or later. It's a good practice to regularly check for updates, ensuring you're running the most secure versions available. 🛡️ This is totally manageable! Just follow these steps, and you’ll be back to smooth sailing with your documents in no time! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01149 · 66.6th percentile
Published
2020-10-02T08:01Z
EPSS history
Timeline
  • 02 OCT 08:01Z
    An issue was discovered in Foxit Reader and PhantomPDF before 10.1
    cvelistv5