CVE-2016-4062: Foxitsoftware Foxit Reader

Medium severity, CVSS 5.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a denial of service (application hang) via a crafted PDF.

Affected products

• Foxitsoftware Foxit Reader: up to and including 7.3.0.118
• Foxitsoftware Phantompdf: up to and including 7.3.0.118

Published 2016-04-22. Last modified 2026-06-17.