CVE-2018-9941

CVE-2018-9941 is a high-severity vulnerability affecting Foxit Reader and PhantomPDF versions 9.0.0.29935, allowing remote code execution due to a type confusion error in the record append method. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page, making it a network-based attack with low complexity. Successful exploitation grants an attacker full control under the context of the current process, leading to high confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.