Skip to content
Sign in
7.5 High

CVE-2019-5047 An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF

Description

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
NitroPDF Versions not published

Other CVEs of NitroPDF

The 6 CVEs of NitroPDF →
CVE-2019-5046 A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in… 8.8 High CVE-2019-5048 A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522 8.8 High CVE-2019-5050 A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522 8.8 High CVE-2019-5045 A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in… 8.8 High
Track this CVE