Foxit PhantomPDF and Reader before 9.3 allow remote attackers to trigger Uninitialized Object Information Disclosure because creation of ArrayBuffer and DataView objects is mishandled.
| Software | From | Fixed in |
|---|---|---|
| foxitsoftware / phantompdf | - | 9.2.0.9297.x |
| foxitsoftware / reader | - | 9.2.0.9297.x |