CVE-2019-14212

—

CVSS 3.0

7.5 high

EPSS

2%p82

Published

Jul 21, 2019 (Jul 21, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling certain XFA JavaScript due to the use of, or access to, a NULL pointer without proper validation on the object.

Vendors: foxitsoftware
Products: phantompdf
Weakness: CWE-476
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.