CVEvulnerability
CVE-2021-38569
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-08-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-674
Description
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects.
Affected configurations
• foxitsoftware foxit reader (< 10.1.4)
• foxitsoftware phantompdf (< 10.1.4)
Related
Weakness · CWE (1)
- CWE-674 Uncontrolled Recursion weakness
References
- https://www.foxitsoftware.com/support/security-bulletins.php Vendor Advisory
- https://www.foxitsoftware.com/support/security-bulletins.php Vendor Advisory