Skip to content
Sign in
7.5 High

CVE-2019-5053 An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF

Description

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
NitroPDF Versions not published

Other CVEs of NitroPDF

The 6 CVEs of NitroPDF →
CVE-2019-5046 A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in… 8.8 High CVE-2019-5048 A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522 8.8 High CVE-2019-5050 A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522 8.8 High CVE-2019-5045 A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in… 8.8 High
Track this CVE