Skip to content
OpenAdvisories
Medium · 6.9 CVE-2024-56139 EUVD-2024-52991

A stack overflow Segmentation Fault (SEGV) and Memory Leak in pdftools

Published Dec 17, 2024 · Updated Dec 20, 2024 · Assigned by GitHub_M

Description

pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has not yet been addressed and users are advised to avoid untrusted input to their systems.

Affected products

VendorProductAffectedFixed
leonhad pdftools <= 0.5.0 —

References