CVE-2021-38568: 
Foxit PDF Reader vulnerability analysis and mitigation

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4, identified as CVE-2021-38568. The vulnerability allows memory corruption during the conversion of a PDF document to a different document format. This security flaw was disclosed on August 11, 2021 (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-787 (Out-of-bounds Write) according to the Common Weakness Enumeration system (NVD).

If exploited, this vulnerability could allow an attacker to cause memory corruption during document format conversion, potentially leading to arbitrary code execution with the privileges of the application. The high CVSS score indicates critical severity with potential for complete compromise of confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability has been patched in Foxit Reader and PhantomPDF version 10.1.4. Users of affected versions should upgrade to version 10.1.4 or later to mitigate this security risk (Vendor Advisory).