CVE-2020-11493

HIGH 8.1CVE-2020-11493 · Published 04/09/2020 · updated 17/06/2026

In short

CVE-2020-11493 is a HIGH (CVSS 8.1) vulnerability affecting phantompdf (foxitsoftware), reader (foxitsoftware).
Chance of exploitation in the next 30 days (EPSS): 0.93%, higher than 60.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phantompdf foxitsoftware	`≤ 10.0.0.35798≤ 9.7.2.29539`	No fix yet
reader foxitsoftware	`≤ 10.0.0.35798`	No fix yet

Description

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, attackers can obtain sensitive information about an uninitialized object because of direct transformation from PDF Object to Stream without concern for a crafted XObject.

References

foxitsoftware.com/support/security-bulletins.php · Vendor Advisory

More vulnerabilities in phantompdf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

phantompdf

foxitsoftware

≤ 10.0.0.35798≤ 9.7.2.29539

No fix yet

reader

foxitsoftware

≤ 10.0.0.35798

No fix yet

More vulnerabilities in phantompdf

See all →