CVE-2020-23872

A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-11-10

Last modified

2024-08-04

Weaknesses

CWE-476

Affected products

• Pdf2xml (Science-miner)

References

• https://github.com/Aurorainfinity/Poc/tree/master/pdf2xml
• https://github.com/kermitt2/pdf2xml/issues/10