Skip to content
OpenAdvisories
High · 8.8 CVE-2019-5050 EUVD-2019-14657GHSA-hf44-fvq2-mqp7

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this c…

Published Oct 9, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.

Affected products

VendorProductAffectedFixed
— NitroPDF NitroPDF 12.12.1.522 —

References