Security Vulnerabilities fixed in Foxit Reader 10.1.4.37623

Description

Addressed potential issues in Foxit Reader 10.1.3.37598 and before where the application could be exposed to Out-of-Bounds Read/Write, Use-After-Free, or Double Free vulnerability and crash if users were using 3D Plugin Beta, which could be exploited by attackers to execute remote code or disclose sensitive information. This occurs due to the lack of proper validation of illogical data range when handling certain U3D objects embedded in PDF files.

Affected Applications

Foxit Reader

CVE References

CVE-2021-31442 CVE-2021-31443 CVE-2021-31444 CVE-2021-31445 CVE-2021-31446 CVE-2021-31447 CVE-2021-31448 CVE-2021-31449

Other References

https://www.foxit.com/support/security-bulletins.html