VULNERABILITY INTELLIGENCE

CVE-2020-13548

CVSS score8.8 HIGH
EPSS probability65.80%
CISA KEVNot currently listed
Published2021-02-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

In Foxit Reader 10.1.0.37527, a specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.

Weakness classification

  • talos-cna@cisco.com: CWE-416
  • nvd@nist.gov: CWE-416

Primary references