VULNERABILITY INTELLIGENCE

CVE-2020-11493

CVSS score8.1 HIGH
EPSS probability0.93%
CISA KEVNot currently listed
Published2020-09-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Description

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.

Weakness classification

  • nvd@nist.gov: CWE-345

Primary references