NetSight
critical9.8

CVE-2022-24954

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw c…

Impact

Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' and 'draw colSpan="1"' substrings.

Affected products

VendorProductAffected versions
FoxitPdf Reader
through 11.1.0.52543
FoxitPdf Editor
through 10.1.6.37749
from 11.0.1.0719 through 11.2.0.53415

Weakness classification

References