An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures.
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Phantompdf | Foxitsoftware | * | 9.7.2 (excluding) |
| Reader | Foxitsoftware | * | 9.7.2 (excluding) |