An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096.

Published 8 y ago 2018-08-01 · modified 4 mo ago 2026-06-17 · JSON

CVSS

8.0

v3.0 · CNA

CISA KEV

not known exploited

EPSS

2.3%

percentile 84%

Public exploits

none known

An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.

Exploit prediction (EPSS)

2.35% probability of exploitation in the next 30 days, higher than 84% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	8.0	`CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H`
NVD	3.1	8.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`
CNA	3.0	8.0	`CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H`
NVD	2.0	6.8	`AV:N/AC:M/Au:N/C:P/I:P/A:P`

Affected products

Foxit Foxit

Classification

Weakness

CWE-416 Use After Free

References

talosintelligence.com /vulnerability_reports/TALOS-2018-0606 · x_refsource_MISC, x_transferred
foxitsoftware.com /support/security-bulletins.php · Patch, Vendor Advisory

Sources

CVE List: CVE-2018-3939
NVD: CVE-2018-3939

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.