Vulnerability Spotlight: Foxit PDF Reader JBIG2 Parser Information Disclosure
Summary: Cisco Talos, which discovered the flaw through researcher Aleksandar Nikolic, identified an information disclosure vulnerability in Foxit PDF Reader tracked as TALOS-2016-0201 and CVE-2016-8334. A wrongly bounded memcpy call while parsing jbig2 segments in a PDF causes out-of-bounds heap memory to be read into a buffer, potentially copying heap metadata, addresses and pointers that disclose memory layout.
Key Takeaway: Combined with another vulnerability, this leak of heap memory layout can be used to bypass ASLR, and phishing campaigns commonly deliver PDF files as malicious attachments or linked downloads - so the document format your users open every day is the delivery path. Snort rules 40429-40430 cover detection.
Read the original at Cisco Talos ↗
- Topics
- Cloud Security
- Mentions
- CVE-2016-8334
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026