Foxitsoftware Quick PDF Library vulnerabilities

3 CVEs affecting Foxitsoftware Quick PDF Library, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-20249, published 2018-12-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-20247, published 2018-12-24. High severity, CVSS 7.8. EPSS: 54.5% chance of exploitation in the next 30 days. In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or…
CVE-2018-20248, published 2018-12-24. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref table pointers or invalid xref table data using the LoadFromFile,…
CVE-2018-20249, published 2018-12-24. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing invalid xref entries using the DAOpenFile or DAOpenFileReadOnly functions may…