What is CVE-2020-35931?

CVE-2020-35931 is a high-severity vulnerability in Apple Macos, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.8/10. Published 2020-12-31.

How severe is CVE-2020-35931?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Apple Macos

CVE-2020-35931

An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subtype entry of the Annotation dictionary, in an incremental update.

EPSS: 0.023 (81.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-35931?: CVE-2020-35931 is a high-severity vulnerability in Apple Macos, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 7.8/10. Published 2020-12-31.
How severe is CVE-2020-35931?: High severity. CVSS v3 base score is 7.8 out of 10.