Skip to content
OpenAdvisories
Unscored CVE-2019-9878 EUVD-2019-19234GHSA-xgqh-hv6x-qppm

There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in p…

Published Mar 19, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

References