VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Aug 29, 2022· Updated Jun 17, 2026

CVE-2021-40326

CVE-2021-40326

Description

Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker can write to an arbitrary file, and display controlled contents, during signature verification.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Foxitsoftware/PDF Editor2 versions
    cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxit:pdf_editor:*:*:*:*:*:*:*:*range: >=11.0,<11.1
    • (no CPE)range: <11.1
  • Foxitsoftware/PDF Reader3 versions
    cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:foxit:pdf_reader:*:*:*:*:*:*:*:*range: >=11.0,<11.1
    • (no CPE)
    • (no CPE)range: <11.1
  • Foxitsoftware/PhantomPDF Mac2 versions
    cpe:2.3:a:foxit:phantompdf:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxit:phantompdf:*:*:*:*:*:*:*:*range: <10.1.6
    • (no CPE)range: <10.1.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.