VULNERABILITY INTELLIGENCE

CVE-2018-20249

CVSS score8.8 HIGH

EPSS probability1.44%

CISA KEVNot currently listed

Published2018-12-24

Last modified2026-06-17

Description

In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may result in an access violation caused by out of bounds memory access.