CVE-2018-17701

CVE-2018-17701 is a critical remote code execution vulnerability affecting Foxit PhantomPDF 9.2.0.9297 and Foxit Reader. It stems from improper validation of JSON objects, leading to a read past the end of an allocated object. With a CVSS score of 8.8 (HIGH), successful exploitation requires user interaction, such as opening a malicious file, and could allow an attacker to execute arbitrary code with the privileges of the current user. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.