CVE-2018-19389: Foxitsoftware Foxit Reader

Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days.

FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exception and application crash) via BMP data because of a ConvertToPDF_x86!ConnectedPDF::ConnectedPDFSDK::FCP_SendEmailNotification issue.

Affected products

• Foxitsoftware Foxit Reader: version 9.3.0.10826 only

Published 2018-11-20. Last modified 2026-06-17.