Vulnerabilities > CVE-2022-25108 - NULL Pointer Dereference vulnerability in Foxit PDF Editor and PDF Reader

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

foxit

CWE-476

NVD

Published: 2022-03-10

Updated: 2022-03-14

Summary

Foxit PDF Reader and Editor before 11.2.1 and PhantomPDF before 10.1.7 allow a NULL pointer dereference during PDF parsing because the pointer is used without proper validation.

Vulnerable Configurations

Part	Description	Count
Application	Foxit Foxit PDF Editor 10.1.6.37749 Foxit PDF Editor 11.0.0.49893 Foxit PDF Editor 11.0.1.0719 Foxit PDF Editor 11.1 Foxit PDF Editor 11.2.0.53415 Foxit PDF Reader 8.3.2.25013 Foxit PDF Reader 9.0.1.1049 Foxit PDF Reader 10.1.3.37598 Foxit PDF Reader 10.1.4.37651 Foxit PDF Reader 11.0.0.49893 Foxit PDF Reader 11.0.1.0719 Foxit PDF Reader 11.1 Foxit PDF Reader 11.1.0.52543	13
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

https://www.foxit.com/support/security-bulletins.html