CVE-2018-19342: Foxitsoftware Foxit Reader

High severity, CVSS 7.1. EPSS: 2% chance of exploitation in the next 30 days.

The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Read Access Violation starting at U3DBrowser+0x000000000000347a" issue.

Affected products

• Foxitsoftware Foxit Reader: version 9.3.0.10826 only
• Foxitsoftware u3d: version 9.3.0.10809 only

Published 2018-11-17. Last modified 2026-06-17.