Foxit Software Phantompdf
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Foxit Software Phantompdf.
By the Year
In 2025 there have been 0 vulnerabilities in Foxit Software Phantompdf. Phantompdf did not have any published security vulnerabilities last year.
Year | Vulnerabilities | Average Score |
---|---|---|
2025 | 0 | 0.00 |
2024 | 0 | 0.00 |
2023 | 0 | 0.00 |
2022 | 0 | 0.00 |
2021 | 18 | 8.49 |
2020 | 52 | 7.82 |
2019 | 7 | 8.16 |
2018 | 96 | 8.23 |
It may take a day or so for new Phantompdf vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Foxit Software Phantompdf Security Vulnerabilities
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
CVE-2021-38568
9.8 - Critical
- August 11, 2021
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document format.
Memory Corruption
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
CVE-2021-38569
7.5 - High
- August 11, 2021
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects.
Stack Exhaustion
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
CVE-2021-38573
9.8 - Critical
- August 11, 2021
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
CVE-2021-38574
9.8 - Critical
- August 11, 2021
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string.
SQL Injection
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
CVE-2021-38570
9.1 - Critical
- August 11, 2021
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows attackers to delete arbitrary files (during uninstallation) via a symlink.
insecure temporary file
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4
CVE-2021-38572
9.8 - Critical
- August 11, 2021
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated.
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4
CVE-2021-33794
9.1 - Critical
- August 11, 2021
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction.
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write
CVE-2021-33793
9.8 - Critical
- August 11, 2021
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion.
Memory Corruption
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write
CVE-2021-33792
7.8 - High
- July 09, 2021
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary.
Memory Corruption
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures
CVE-2021-33795
5.5 - Medium
- July 09, 2021
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled.
Improper Handling of Exceptional Conditions
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition
CVE-2018-20313
8.1 - High
- January 07, 2021
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Memory Corruption
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition
CVE-2018-20314
8.1 - High
- January 07, 2021
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCheckLicence race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Memory Corruption
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition
CVE-2018-20315
8.1 - High
- January 07, 2021
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Race Condition
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition
CVE-2018-20316
8.1 - High
- January 07, 2021
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode.
Memory Corruption
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition
CVE-2018-20309
8.1 - High
- January 07, 2021
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyGetAppEdition race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Memory Corruption
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition
CVE-2018-20310
8.1 - High
- January 07, 2021
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Memory Corruption
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition
CVE-2018-20311
8.1 - High
- January 07, 2021
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyCPDFAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read.
Memory Corruption
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition
CVE-2018-20312
8.1 - High
- January 07, 2021
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a proxyDoAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read, a different issue than CVE-2018-20310 because of a different opcode.
Memory Corruption
An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier
CVE-2020-28203
5.5 - Medium
- December 15, 2020
An issue was discovered in Foxit Reader and PhantomPDF 10.1.0.37527 and earlier. There is a null pointer access/dereference while opening a crafted PDF file, leading the application to crash (denial of service).
NULL Pointer Dereference
An issue was discovered in Foxit Reader and PhantomPDF before 10.1
CVE-2020-26539
9.8 - Critical
- October 02, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. When there is a multiple interpretation error for /V (in the Additional Action and Field dictionaries), a use-after-free can occur with resultant remote code execution (or an information leak).
Dangling pointer
An issue was discovered in Foxit Reader and PhantomPDF before 10.1
CVE-2020-26538
7.8 - High
- October 02, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory.
An issue was discovered in Foxit Reader and PhantomPDF before 10.1
CVE-2020-26537
9.8 - Critical
- October 02, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. In a certain Shading calculation, the number of outputs is unequal to the number of color components in a color space. This causes an out-of-bounds write.
Memory Corruption
An issue was discovered in Foxit Reader and PhantomPDF before 10.1
CVE-2020-26536
5.5 - Medium
- October 02, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is a NULL pointer dereference via a crafted PDF document.
NULL Pointer Dereference
An issue was discovered in Foxit Reader and PhantomPDF before 10.1
CVE-2020-26535
9.8 - Critical
- October 02, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation (and read access violation).
Memory Corruption
An issue was discovered in Foxit Reader and PhantomPDF before 10.1
CVE-2020-26534
9.8 - Critical
- October 02, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 10.1. There is an Opt object use-after-free related to Field::ClearItems and Field::DeleteOptions, during AcroForm JavaScript execution.
Dangling pointer
An issue was discovered in Foxit PhantomPDF before 8.3.11
CVE-2019-20823
7.5 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs.
Classic Buffer Overflow
An issue was discovered in Foxit PhantomPDF before 8.3.7
CVE-2018-21237
5.3 - Medium
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action.
Insufficiently Protected Credentials
An issue was discovered in Foxit PhantomPDF before 8.3.7
CVE-2018-21238
7.5 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.
Resource Exhaustion
An issue was discovered in Foxit Reader and PhantomPDF before 9.2
CVE-2018-21239
5.3 - Medium
- June 04, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action.
Insufficiently Protected Credentials
An issue was discovered in Foxit Reader and PhantomPDF before 9.2
CVE-2018-21240
7.5 - High
- June 04, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.
Resource Exhaustion
An issue was discovered in Foxit PhantomPDF before 8.3.6
CVE-2018-21241
7.8 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code.
Untrusted Path
An issue was discovered in Foxit PhantomPDF before 8.3.6
CVE-2018-21242
9.8 - Critical
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action.
Information Disclosure
An issue was discovered in Foxit PhantomPDF before 8.3.6
CVE-2018-21243
6.5 - Medium
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.6. It has COM object mishandling when Microsoft Word is used.
Unrestricted File Upload
An issue was discovered in Foxit PhantomPDF before 8.3.6
CVE-2018-21244
9.8 - Critical
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows arbitrary application execution via an embedded executable file in a PDF portfolio, aka FG-VD-18-029.
Unrestricted File Upload
An issue was discovered in Foxit PhantomPDF before 8.3.11
CVE-2019-20824
7.5 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
NULL Pointer Dereference
An issue was discovered in Foxit PhantomPDF before 8.3.11
CVE-2019-20825
9.8 - Critical
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.11. It has an out-of-bounds write when Internet Explorer is used.
Memory Corruption
An issue was discovered in Foxit Reader and PhantomPDF before 9.6
CVE-2019-20828
7.5 - High
- June 04, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a buffer overflow because a looping correction does not occur after JavaScript updates Field APs.
Classic Buffer Overflow
An issue was discovered in Foxit Reader and PhantomPDF before 9.6
CVE-2019-20829
7.5 - High
- June 04, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has a NULL pointer dereference via FXSYS_wcslen in an Epub file.
NULL Pointer Dereference
An issue was discovered in Foxit Reader and PhantomPDF before 9.6
CVE-2019-20830
9.8 - Critical
- June 04, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.6. It has an out-of-bounds write when Internet Explorer is used.
Memory Corruption
An issue was discovered in Foxit PhantomPDF before 8.3.10
CVE-2019-20832
4.3 - Medium
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.10. It has homograph mishandling.
An issue was discovered in Foxit PhantomPDF before 8.3.10
CVE-2019-20834
7.5 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.10. It allows signature validation bypass via a modified file or a file with non-standard signatures.
Improper Verification of Cryptographic Signature
An issue was discovered in Foxit PhantomPDF before 8.3.10
CVE-2019-20833
7.5 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.10. It has mishandling of cloud credentials, as demonstrated by Google Drive.
Insufficiently Protected Credentials
An issue was discovered in Foxit Reader and PhantomPDF before 9.5
CVE-2019-20837
7.5 - High
- June 04, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It allows signature validation bypass via a modified file or a file with non-standard signatures.
Improper Verification of Cryptographic Signature
An issue was discovered in Foxit Reader and PhantomPDF before 9.5
CVE-2019-20835
4.3 - Medium
- June 04, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling.
An issue was discovered in Foxit Reader and PhantomPDF before 9.5
CVE-2019-20836
7.5 - High
- June 04, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has mishandling of cloud credentials, as demonstrated by Google Drive.
Information Disclosure
An issue was discovered in Foxit Reader and PhantomPDF before 9.7
CVE-2019-20817
7.5 - High
- June 04, 2020
An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It has a NULL pointer dereference.
NULL Pointer Dereference
An issue was discovered in Foxit PhantomPDF before 8.3.12
CVE-2019-20813
7.5 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference.
NULL Pointer Dereference
An issue was discovered in Foxit PhantomPDF before 8.3.12
CVE-2019-20816
7.5 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.12. It has a NULL pointer dereference during the parsing of file data.
NULL Pointer Dereference
An issue was discovered in Foxit PhantomPDF before 8.3.12
CVE-2019-20815
7.5 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing.
Resource Exhaustion
An issue was discovered in Foxit PhantomPDF before 8.3.12
CVE-2019-20814
7.5 - High
- June 04, 2020
An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level.
Resource Exhaustion
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Foxit Software Phantompdf or by Foxit Software? Click the Watch button to subscribe.
