CVE-2020-35931

—

CVSS 3.1

7.8 high

EPSS

2%p82

Published

Dec 31, 2020 (Dec 31, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subtype entry of the Annotation dictionary, in an incremental update.

Vendors: foxitsoftware
Products: foxit reader, phantompdf
Weakness: CWE-754
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news2 stories

These 2 attacks allow to alter certified PDF Documents

Security AffairsMay 30, 14:33 UTC · May 30, 2021Vulnerability CVE-2020-35931 CVE-2021-28545 CVE-2021-28546+1 CVEs

Researchers Demonstrate 2 New Hacks to Modify Certified PDF Documents

The Hacker NewsMay 29, 08:34 UTC · May 29, 2021Vulnerability CVE-2021-28545 CVE-2021-28546 CVE-2020-35931+1 CVEs