VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 11, 2021· Updated Jun 17, 2026

CVE-2021-38563

CVE-2021-38563

Description

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size (derived from a /Size entry) is smaller than the maximum indirect object number, and thus there is an attempted incorrect array access (leading to a NULL pointer dereference, or out-of-bounds read or write).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Foxitsoftware/PDF Reader2 versions
    cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*range: <=11.0.0.0510
    • (no CPE)range: <11.0.1
  • Foxitsoftware/PDF Editor2 versions
    cpe:2.3:a:foxitsoftware:pdf_editor:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxitsoftware:pdf_editor:*:*:*:*:*:*:*:*range: <=11.0.0.0510
    • (no CPE)range: <11.0.1
  • Foxit/PDF Readerdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.