Skip to content
OpenAdvisories
Critical · 9.8 CVE-2019-5067 EUVD-2019-14672GHSA-4pg2-m5v4-8fpj

An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially …

Published Sep 18, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can cause a read and write from uninitialized memory, resulting in memory corruption and possibly arbitrary code execution. To trigger this vulnerability, a specifically crafted PDF document needs to be processed by the target application.

Affected products

VendorProductAffectedFixed
Talos Aspose Aspose.PDF 19.2 for C++ —

References