https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 19:52:46 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-10625 cnvd-2020-10625 https://cve.radiocsirt.org/vuln/cnvd-2020-10625 https://cve.radiocsirt.org/vuln/euvd-2026-38766 EUVD-2026-38766 https://cve.radiocsirt.org/vuln/euvd-2026-38766 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8854 <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of JPEG files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9606.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of JPEG files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9606.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8854 https://cve.radiocsirt.org/vuln/ghsa-46v5-27x8-pxv8 <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of JPEG files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9606.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of JPEG files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9606.</p> https://cve.radiocsirt.org/vuln/ghsa-46v5-27x8-pxv8 https://cve.radiocsirt.org/vuln/gsd-2020-8854 gsd-2020-8854 https://cve.radiocsirt.org/vuln/gsd-2020-8854