Security Vulnerabilities fixed in Foxit Reader 10.1.3.37598

Description

Addressed potential issues in Foxit Reader 10.1.0.37527 and before where the application could be exposed to Out-of-Bounds Read, Use-After-Free, or Memory Corruption vulnerability and crash if users were using 3D Plugin Beta, which could be exploited by attackers to execute remote code or disclose sensitive information. This occurs when working with certain PDF files that contain 3D objects due to a parse error as the data format recorded in the PDF file is not consistent with the actual one

Affected Applications

Foxit Reader

CVE References

CVE-2021-27261 CVE-2021-27262 CVE-2021-27263 CVE-2021-27264 CVE-2021-27265 CVE-2021-27266 CVE-2021-27267 CVE-2021-27268 CVE-2021-27269 CVE-2021-27271

Other References

https://www.foxit.com/support/security-bulletins.html