Skip to content

Foxitsoftware · weakness class

Denial of Service

17 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

  1. The Foxit JPEG2000/JBIG2 Decoder add-on before 2.0.2009.616 for Foxit Reader 3.0 before Build 1817 does not properly handle a fatal error during decoding of a JPEG2000 (aka JPX) h…CVE-2009-0691Foxitsoftware · 5.7% likely

    CWE-399

  2. An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling the clone function due to an endless loop resulting from confusing relationship…CVE-2019-14207Foxitsoftware · 2.2% likely

    CWE-835

  3. An issue was discovered in Foxit Reader and PhantomPDF before 9.7.1. It allows stack consumption via a loop of an indirect object reference.CVE-2020-13815Foxitsoftware · 1.6% likely

    CWE-400

  4. An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream.CVE-2020-13809Foxitsoftware · 1.6% likely

    CWE-400

  5. An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data.CVE-2020-13808Foxitsoftware · 1.6% likely

    CWE-835

  6. An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop.CVE-2020-13807Foxitsoftware · 1.6% likely

    CWE-835

  7. An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows stack consumption via nested function calls for XML parsing.CVE-2019-20819Foxitsoftware · 1.6% likely

    CWE-674

  8. An issue was discovered in Foxit Reader and PhantomPDF before 9.7. It allows memory consumption because data is created for each page of an application level.CVE-2019-20818Foxitsoftware · 1.6% likely

    CWE-770

  9. An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows stack consumption via nested function calls for XML parsing.CVE-2019-20815Foxitsoftware · 1.6% likely

    CWE-674

  10. An issue was discovered in Foxit PhantomPDF before 8.3.12. It allows memory consumption because data is created for each page of an application level.CVE-2019-20814Foxitsoftware · 1.6% likely

    CWE-770

  11. Foxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists.CVE-2019-17183Foxitsoftware · 1.4% likely

    CWE-772

  12. Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScri…CVE-2019-13124Foxitsoftware · 1.3% likely

    CWE-674

  13. Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScri…CVE-2019-13123Foxitsoftware · 1.3% likely

    CWE-674

  14. An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.CVE-2018-21240Foxitsoftware · 1.0% likely

    CWE-400

  15. An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows memory consumption via an ArrayBuffer(0xfffffffe) call.CVE-2018-21238Foxitsoftware · 1.0% likely

    CWE-400

  16. An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects.CVE-2021-38569Foxitsoftware · 1.0% likely

    CWE-674

  17. An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes.CVE-2021-38566Foxitsoftware · 1.0% likely

    CWE-674

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.