High severity7.5NVD Advisory· Published Sep 29, 2018· Updated Jun 17, 2026
CVE-2018-17781
CVE-2018-17781
Description
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*range: <=9.2.0.9297
- (no CPE)range: <9.3
cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:foxitsoftware:reader:*:*:*:*:*:*:*:*range: <=9.2.0.9297
- (no CPE)range: <9.3
Patches
Vulnerability mechanics
References
2- www.foxitsoftware.com/support/security-bulletins.phpnvdPatchVendor Advisory
- www.securitytracker.com/id/1041769nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.