CVE-2019-6734

CVE-2019-6734 is a sensitive information disclosure vulnerability affecting Foxit PhantomPDF and Reader on Windows. It stems from improper handling of the setInterval method, allowing an attacker to reuse a freed pointer through malicious JavaScript. While requiring user interaction to open a malicious file or visit a malicious page, successful exploitation could lead to high confidentiality impact and, when chained with other vulnerabilities, arbitrary code execution. Despite its medium CVSS score of 6.5, there is no evidence of active exploitation, public exploit code, or significant community discussion.