| Package | Affected versions | Patched versions |
|---|---|---|
| phantompdf | < 9.3 | 9.3 |
| reader | < 9.3 | 9.3 |
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service (use-after-free) because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free