CVE-2018-14282

CVE-2018-14282 is a remote code execution vulnerability affecting Foxit Reader 9.0.1.1049 and PhantomPDF on Windows. It stems from improper pointer initialization when handling FlateDecode streams, allowing an attacker to execute arbitrary code within the current process context. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious web page. The vulnerability has a high CVSS score of 8.8, but there is no evidence of active exploitation, publicly available exploit code, or significant community discussion.