CVE-2017-8454: Foxitsoftware Foxit Reader

High severity, CVSS 8.8. EPSS: 3.9% chance of exploitation in the next 30 days.

Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows remote attackers to obtain sensitive information or possibly execute arbitrary code via a crafted font in a PDF document.

Affected products

• Foxitsoftware Foxit Reader: up to and including 8.2.0.2051
• Foxitsoftware Phantompdf: up to and including 8.2.0.2192

Published 2017-05-03. Last modified 2026-06-17.