CVE-2018-20313: 
NixOS vulnerability analysis and mitigation

Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, contains a proxyPreviewAction race condition that can cause a stack-based buffer overflow or an out-of-bounds read (Debian Security).

The vulnerability is identified as CVE-2018-20313 and affects the proxyPreviewAction functionality in Foxit Reader and PhantomPDF. The issue manifests as a race condition that can lead to two types of memory corruption vulnerabilities: a stack-based buffer overflow and an out-of-bounds read (Debian Security).

The vulnerability could potentially allow attackers to cause memory corruption through stack-based buffer overflow or information disclosure through out-of-bounds read operations (Debian Security).

The vulnerability requires an attacker to trigger a race condition in the proxyPreviewAction functionality. No public exploits were identified at the time of disclosure (Debian Security).

Users should upgrade to Foxit Reader version 9.5 or later, and PhantomPDF users should upgrade to version 8.3.10 (for 8.x series) or version 9.5 (for 9.x series) (Debian Security).