Description
An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter an Out-of-Bounds Read in Indexing or a Heap Overflow and crash during handling of certain PDF files that embed specifically crafted 3D content, due to an array access violation.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.foxitsoftware.com/support/security-bulletins.php
Scores
CVSS v3
8.8
EPSS
0.0013
EPSS Percentile
31.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-125
Status
published
Products (1)
foxitsoftware/3d
< 9.4.0.16807 (2 CPE variants)
Published
Jan 28, 2019
Tracked Since
Feb 18, 2026