CVE-2021-40326

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents

published August 29, 2022

CVSS
—
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00280 · 19.4th percentile
Published
2022-08-29T04:54Z
EPSS history
Timeline
  • 29 AUG 04:54Z
    Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents
    cvelistv5