CVE-2020-13809: Foxitsoftware Phantompdf

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream.

Affected products

• Foxitsoftware Phantompdf: before 9.7.2 (fixed in 9.7.2)
• Foxitsoftware Reader: before 9.7.2 (fixed in 9.7.2)

Published 2020-06-04. Last modified 2026-06-17.