CVE-2019-20816: 
Foxit PhantomPDF vulnerability analysis and mitigation

An issue was discovered in Foxit PhantomPDF before 8.3.12 that involves a NULL pointer dereference during the parsing of file data (NVD).

The vulnerability is identified as CVE-2019-20816 and affects Foxit PhantomPDF software versions before 8.3.12. The issue manifests as a NULL pointer dereference vulnerability that occurs during file data parsing operations. Based on the CVSS scores, the vulnerability has a severity rating of 7.5 (High) for CVSS 3.0 and 5.0 (Medium) for CVSS 2.0 (ManageEngine).

The vulnerability could potentially lead to application crashes and denial of service conditions when processing specially crafted PDF files. The NULL pointer dereference could cause the application to terminate unexpectedly, affecting system availability (NVD).

The vulnerability requires an attacker to provide a specially crafted PDF file that triggers the NULL pointer dereference during parsing. No known exploits were reported in the wild at the time of disclosure (ManageEngine).

Users are advised to upgrade to Foxit PhantomPDF version 8.3.12 or later to address this vulnerability. The vendor has released patches that fix the NULL pointer dereference issue (NVD).