{"id":"CVE-2016-8334","aliases":["EUVD-2016-9182","GHSA-9x9p-7f3c-4rvq"],"status":"published","title":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be...","description":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.","severity":{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.18495,"percentile":0.97266,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2017-01-06T21:00:00Z","modified":"2026-06-17T00:54:11Z","products":[{"vendor":"foxit","product":"foxit reader"},{"vendor":"foxit software","product":"foxit reader"},{"vendor":"foxitsoftware","product":"reader"}],"references":[{"url":"http://www.securityfocus.com/bid/93799","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0201/","tags":["x_refsource_MISC","x_transferred","Technical Description","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8334"},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0201"},{"url":"https://github.com/advisories/GHSA-9x9p-7f3c-4rvq"}],"sources":{"cve":[{"id":"CVE-2016-8334","description":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.","status":"published","published":"2017-01-06T21:00:00Z","modified":"2024-08-06T02:20:30.475Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:33.07583Z"}],"euvd":[{"id":"EUVD-2016-9182","description":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.","status":"published","published":"2017-01-06T21:00:00Z","modified":"2024-08-06T02:20:30Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T02:22:30.514382Z"}],"ghsa":[{"id":"GHSA-9x9p-7f3c-4rvq","title":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be...","description":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.","status":"published","published":"2022-05-13T01:01:12Z","modified":"2025-04-20T03:31:54Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:01:38.976438Z"}],"nvd":[{"id":"CVE-2016-8334","description":"A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory layout and in bypassing ASLR.","status":"published","published":"2017-01-06T21:59:01.773Z","modified":"2026-06-17T00:54:11.147Z","cvss":[{"version":"3.0","score":6.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:03:33.686843Z"}]}}