CVE-2019-6732

CVE-2019-6732 is a sensitive information disclosure vulnerability affecting Foxit PhantomPDF and Reader on Windows. It stems from improper validation of user-supplied data in the AFParseDateEx method, leading to a read past the end of an allocated buffer. Rated 6.5 MEDIUM, exploitation requires user interaction, such as opening a malicious file, and could allow an attacker to disclose sensitive information, potentially leading to code execution when chained with other vulnerabilities. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.