CVE-2018-17700

CVE-2018-17700 is a critical remote code execution vulnerability affecting Foxit PhantomPDF and Reader versions 9.2.0.9297 and earlier on Windows. It stems from improper validation in Array.prototype.concat, leading to a read past the end of an allocated object. With a CVSS score of 8.8 (High), successful exploitation requires user interaction, such as opening a malicious file, and allows an attacker to execute arbitrary code in the context of the current process. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.