← Database

CVE-2021-38573

CRITICAL CVSS: 9.8 Published: 2021-08-11 Modified: 2026-06-17

Description

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.

Affected Platforms

Foxitsoftware PhantompdfFoxitsoftware Foxit Reader

Weakness Type

NVD-CWE-noinfo

References