CVE-2021-38563

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader versions prior to 11.0.1 Foxit PDF Editor versions prior to 11.0.1

Description The issue arises from incorrect handling of array sizes derived from a /Size entry, leading to situations where the array size is smaller than the maximum indirect object number. This results in attempted incorrect array access, which can cause a NULL pointer dereference, or out-of-bounds read or write.

Recommendations For Foxit PDF Reader versions prior to 11.0.1, update to version 11.0.1 or later. For Foxit PDF Editor versions prior to 11.0.1, update to version 11.0.1 or later.