CVE-2021-38569: Foxitsoftware Foxit Reader

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects.

Affected products

• Foxitsoftware Foxit Reader: before 10.1.4 (fixed in 10.1.4)
• Foxitsoftware Phantompdf: before 10.1.4 (fixed in 10.1.4)

Published 2021-08-11. Last modified 2026-06-17.