CVE-2010-20010 HIGH

CVE-2010-20010: Foxit PDF Reader < 4.2.0.0928 Title Stack Buffer Overflow

Vendor Foxit Software
Product Foxit PDF Reader
Weakness CWE-121
Published August 20, 2025
Last update May 15, 2026
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A specially crafted PDF with an overlong Title string can overflow a fixed-size stack buffer, corrupt the Structured Exception Handler (SEH) chain, and lead to arbitrary code execution in the context of the user who opens the file.

Key dates

02Disclosure timeline

August 20, 2025 CVE published
May 15, 2026 Record updated