Vulnerability Spotlight: Memory corruption and use-after-free vulnerabilities in Foxit PDF Reader
Summary: Cisco Talos discovered a memory corruption and use-after-free vulnerability in Foxit PDF Reader, one of the most popular PDF readers, which supports JavaScript for interactive documents and dynamic forms. The flaws, tracked as TALOS-2021-1429 (CVE-2021-40420) and TALOS-2022-1439 (CVE-2022-22150), can be triggered when an attacker tricks a user into opening a specially crafted malicious PDF file or opening it in a browser with a PDF reader plugin installed, leading to arbitrary code execution.
What you should know: Talos tested and confirmed that Foxit Reader 11.1.0.52543 could still be exploited, so anyone running an older build is exposed to a malicious PDF that executes code on open.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-40420CVE-2022-22150
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026