CVE-2020-12247: 
NixOS vulnerability analysis and mitigation

In Foxit Reader and PhantomPDF before 10.0.1, and PhantomPDF before 9.7.3, a security vulnerability was identified (CVE-2020-12247) where attackers could obtain sensitive information from an out-of-bounds read. The vulnerability occurs because a text-string index continues to be used after splitting a string into two parts (NVD, MITRE).

The vulnerability is characterized by an out-of-bounds read condition that occurs when processing text strings. Specifically, the issue arises when the application continues to use a text-string index after splitting a string into two parts, which can lead to unauthorized access to memory locations (NVD).

The exploitation of this vulnerability could result in unauthorized access to sensitive information and potential application crashes (NVD).

The vulnerability requires an attacker to provide specially crafted input that triggers the out-of-bounds read condition. A crash may occur as a result of the exploitation (NVD).

Users are advised to update to Foxit Reader version 10.0.1 or later, and PhantomPDF version 9.7.3 or later to address this vulnerability. The fix is available through the official Foxit software update channels (Foxit Security).