CVE-2018-19347: Foxitsoftware Foxit Reader

High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days.

The u3d plugin 9.3.0.10809 (aka plugins\U3DBrowser.fpi) in FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read) or obtain sensitive information via a U3D sample because of a "Data from Faulting Address controls Branch Selection starting at U3DBrowser!PlugInMain+0x00000000000d11bb" issue.

Affected products

• Foxitsoftware Foxit Reader: version 9.3.0.10826 only
• Foxitsoftware u3d: version 9.3.0.10809 only

Published 2018-11-17. Last modified 2026-06-17.