CVE-2019-5053

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability.

Score

CVSS 3.1 7.8 High

Status

Modified - talos-cna@cisco.com

Published

2019-10-09

Last modified

2024-08-04

Weaknesses

CWE-416

Affected products

• Nitropdf (Gonitro)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0830