Vulnerabilities > CVE-2022-25108 - NULL Pointer Dereference vulnerability in Foxit PDF Editor and PDF Reader

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

foxit

CWE-476

NVD

Published: 2022-03-10

Updated: 2022-03-14

Summary

Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without proper validation.

Vulnerable Configurations

Part	Description	Count
Application	Foxit Foxit PDF Editor - Foxit PDF Editor 10.1.6.37749 Foxit PDF Editor 11.0.0 Foxit PDF Editor 11.0.0.49893 Foxit PDF Editor 11.0.1.0719 Foxit PDF Editor 11.1 Foxit PDF Editor 11.2.0.53415 Foxit PDF Reader - Foxit PDF Reader 8.3.2.25013 Foxit PDF Reader 9.0.1.1049 Foxit PDF Reader 10.1.0.37527 Foxit PDF Reader 10.1.3.37598 Foxit PDF Reader 10.1.4.37651 Foxit PDF Reader 11.0.0.49893 Foxit PDF Reader 11.0.1.0719 Foxit PDF Reader 11.0.1.49938 Foxit PDF Reader 11.1 Foxit PDF Reader 11.1.0.52543	18
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

https://www.foxit.com/support/security-bulletins.html