CVEvulnerability

CVE-2021-40326

5.5 MEDIUM Published 2022-08-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-08-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-347

Description

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.

Affected configurations

• foxit pdf editor (>= 11.0 < 11.1) • foxit pdf reader (>= 11.0 < 11.1) • foxit phantompdf (< 10.1.6)

Related

Weakness · CWE (1)

  • CWE-347 Improper Verification of Cryptographic Signature weakness

References