VULNERABILITY INTELLIGENCE
CVE-2016-8334
CVSS score6.8 MEDIUM
EPSS probability18.50%
CISA KEVNot currently listed
Published2017-01-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H
Description
A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.
Weakness classification
- CWE-125: Out-of-bounds Read
Primary references
- talos-cna@cisco.com
- talos-cna@cisco.com — Technical Description, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Technical Description, Third Party Advisory