CVE-2016-4065

—

CVSS 3.0

7.8 high

EPSS

3%p85

Published

Apr 22, 2016 (Apr 22, 2016)

Modified

Jun 17, 2026

Description

The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted (1) JPEG, (2) GIF, or (3) BMP image.

Vendors: foxitsoftware
Products: foxit reader, phantompdf
Weakness: CWE-119
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.