Vulnerabilities > CVE-2022-47881 - Out-of-bounds Read vulnerability in Foxit PDF Editor and PDF Reader

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2023-01-18

Updated: 2023-01-25

Summary

Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.

Part	Description	Count
Application	Foxit Foxit PDF Reader - Foxit PDF Reader 8.3.2.25013 Foxit PDF Reader 9.0.1.1049 Foxit PDF Reader 10.1.0.37527 Foxit PDF Reader 10.1.3.37598 Foxit PDF Reader 10.1.4.37651 Foxit PDF Reader 11.0.0.49893 Foxit PDF Reader 11.0.1.0719 Foxit PDF Reader 11.0.1.49938 Foxit PDF Reader 11.1 Foxit PDF Reader 11.1.0.52543 Foxit PDF Reader 11.2.1 Foxit PDF Reader 11.2.1.53537 Foxit PDF Editor - Foxit PDF Editor 10.1.6.37749 Foxit PDF Editor 10.1.7 Foxit PDF Editor 10.1.8.37795 Foxit PDF Editor 11.0.0 Foxit PDF Editor 11.0.0.49893 Foxit PDF Editor 11.0.1.0719 Foxit PDF Editor 11.1 Foxit PDF Editor 11.2.0.53415 Foxit PDF Editor 11.2.1 Foxit PDF Editor 11.2.2 Foxit PDF Editor 11.2.2.53575	25

Overread Buffers
An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.