vciy

Foxit Reader: 28 records in one advisory

28 records announced together, published between 2019-10-04 and 2021-05-07, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://www.foxitsoftware.com/support/security-bulletins.php. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

2 of 28 records name something of its own. For the other 26, held sources say the same thing about each.

Most commonly mapped weakness across the batch: CWE-125: Out-of-bounds Read.

What this page does not cover

This batch is 28 of the 636 records that cite the same advisory. The other 608 are different findings announced alongside it.

440 of them are on the sibling batches linked below. The remaining 168 are grouped with nothing and have only their own record pages.

Other batches under the same advisory: foxitsoftware-security-bulletins-0463ca62e1, foxitsoftware-security-bulletins-828fde758e, foxitsoftware-security-bulletins-fd32fa6e8f

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2019-13318processesCWE-134: Use of Externally-Controlled Format…
CVE-2019-17138no title heldCWE-125: Out-of-bounds Read
CVE-2020-10894no title heldCWE-125: Out-of-bounds Read
CVE-2020-10901no title heldCWE-125: Out-of-bounds Read
CVE-2020-10903no title heldCWE-125: Out-of-bounds Read
CVE-2020-10905verticesCWE-125: Out-of-bounds Read
CVE-2020-17411no title heldCWE-125: Out-of-bounds Read
CVE-2020-8852no title heldCWE-125: Out-of-bounds Read
CVE-2020-8877no title heldCWE-125: Out-of-bounds Read
CVE-2020-8879no title heldCWE-125: Out-of-bounds Read
CVE-2020-8883no title heldCWE-125: Out-of-bounds Read
CVE-2021-27262no title heldCWE-125: Out-of-bounds Read
CVE-2021-27263no title heldCWE-125: Out-of-bounds Read
CVE-2021-27264no title heldCWE-125: Out-of-bounds Read
CVE-2021-27265no title heldCWE-125: Out-of-bounds Read
CVE-2021-27266no title heldCWE-125: Out-of-bounds Read
CVE-2021-31443no title heldCWE-125: Out-of-bounds Read
CVE-2021-31444no title heldCWE-125: Out-of-bounds Read
CVE-2021-31445no title heldCWE-125: Out-of-bounds Read
CVE-2021-31446no title heldCWE-125: Out-of-bounds Read
CVE-2021-31447no title heldCWE-125: Out-of-bounds Read
CVE-2021-31448no title heldCWE-125: Out-of-bounds Read
CVE-2021-31462no title heldCWE-125: Out-of-bounds Read
CVE-2021-31463no title heldCWE-125: Out-of-bounds Read
CVE-2021-31464no title heldCWE-125: Out-of-bounds Read
CVE-2021-31467no title heldCWE-125: Out-of-bounds Read
CVE-2021-31469no title heldCWE-125: Out-of-bounds Read
CVE-2021-31471no title heldCWE-125: Out-of-bounds Read

28 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.