← Vulnerability feed

Vulnerability record · CVE-2021-34850 · published 4 August 2021

CVE-2021-34850: Foxit pdf reader use after free vulnerability

Foxit · Pdf Reader

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-14529.

7.8 CVSS 3.1 High EPSS 38% · top 1.5% CWE-416 · Use after free
7.8CVSS 3.1 base score, v2 6.8
38%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-14529.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.foxit.com/support/security-bulletins.html Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-932/ Third Party AdvisoryVDB Entry
https://www.foxit.com/support/security-bulletins.html Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-932/ Third Party AdvisoryVDB Entry

Track CVE-2021-34850 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-24954Foxit pdf reader out-of-bounds write vulnerabilityFoxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpan="-2"' a…EPSS 12%9.8CVE-2022-24955Foxit pdf reader uncontrolled search path element vulnerabilityFoxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.EPSS 1.1%9.8CVE-2021-38563Foxit pdf reader vulnerabilityAn issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size (derived from…EPSS 1.1%9.1CVE-2021-38564Foxitsoftware pdf editor out-of-bounds read vulnerabilityAn issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand.EPSS 1.1%8.8CVE-2025-13941Foxit pdf editor incorrect permission assignment vulnerabilityA local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system pe…EPSS 0.19%8.8CVE-2025-32451Foxit pdf reader vulnerabilityA memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript co…EPSS 0.58%8.8CVE-2024-47810Foxit pdf editor use after free vulnerabilityA use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a m…EPSS 1.3%8.8CVE-2024-49576Foxit pdf editor use after free vulnerabilityA use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript cod…EPSS 1.1%

Source: NIST National Vulnerability Database (record CVE-2021-34850), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.