What is CVE-2020-26535?

CVE-2020-26535 is a critical-severity vulnerability in Foxitsoftware Foxit_reader, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2020-10-02.

How severe is CVE-2020-26535?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Foxitsoftware Foxit_reader

CVE-2020-26535

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation (and read acce…

Vulnerability class: Buffer Overflow

EPSS: 0.017 (74.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Foxitsoftware Foxit_reader
Foxitsoftware Phantompdf
N/a — versions n/a

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-26535?: CVE-2020-26535 is a critical-severity vulnerability in Foxitsoftware Foxit_reader, classified under Out-of-bounds Write. CVSS score: 9.8/10. Published 2020-10-02.
How severe is CVE-2020-26535?: Critical severity. CVSS v3 base score is 9.8 out of 10.