← Vulnerability feed

Vulnerability record · CVE-2021-38566 · published 11 August 2021

CVE-2021-38566: Foxitsoftware pdf editor vulnerability

Foxitsoftware · Pdf Editor

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes.

7.5 CVSS 3.1 High EPSS 0.96% · top 39.9% CWE-674 · CWE-674
7.5CVSS 3.1 base score, v2 5.0
0.96%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.foxitsoftware.com/support/security-bulletins.php Vendor Advisory
https://www.foxitsoftware.com/support/security-bulletins.php Vendor Advisory

Track CVE-2021-38566 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-38563Foxit pdf reader vulnerabilityAn issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size (derived from…EPSS 1.1%9.1CVE-2021-38564Foxitsoftware pdf editor out-of-bounds read vulnerabilityAn issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand.EPSS 1.1%7.8CVE-2021-34849Foxit pdf reader use after free vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is …EPSS 2.9%7.8CVE-2021-34850Foxit pdf reader use after free vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is …EPSS 38%7.8CVE-2021-34851Foxit pdf reader use after free vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is …EPSS 4.0%7.8CVE-2021-34852Foxit pdf reader use after free vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is …EPSS 4.0%7.8CVE-2021-34853Foxit pdf reader use after free vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is …EPSS 4.0%7.8CVE-2021-34838Foxit pdf reader use after free vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is …EPSS 3.8%

Source: NIST National Vulnerability Database (record CVE-2021-38566), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.