CVE-2019-5047

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability.

Score

CVSS 3.1 7.8 High

Status

Modified - talos-cna@cisco.com

Published

2019-10-09

Last modified

2024-08-04

Weaknesses

CWE-416, CWE-843

Affected products

• Nitropdf (Gonitro)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0816