CVE-2021-38573

Publication date

2021-08-11 21:12:54

Family

mitre

State

PUBLISHED

Description

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated.