HighCVSS 7.5
EPSS 1.4%
pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject.
Product
flowpaper pdf2json vulnerabilities
18 published CVES affecting flowpaper pdf2json, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 18
- Critical
- 1
- High
- 4
- Medium
- 13
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest flowpaper pdf2json CVEs
Newest publication first
-
-
CriticalCVSS 9.8 EPSS 1.8%
pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch.
-
MediumCVSS 5.5 EPSS 0.63%
An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 .
-
MediumCVSS 5.5 EPSS 0.67%
An issue has been found in function Gfx::doShowText in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Use After Free .
-
MediumCVSS 5.5 EPSS 0.63%
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception.
-
MediumCVSS 5.5 EPSS 0.63%
An issue has been found in function DCTStream::readHuffSym in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 2 .
-
MediumCVSS 5.5 EPSS 0.63%
An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .
-
MediumCVSS 5.5 EPSS 0.63%
An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1) .
-
MediumCVSS 5.5 EPSS 0.63%
An issue has been found in function DCTStream::reset in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 8 .
-
MediumCVSS 5.5 EPSS 0.63%
An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece (invalid read of size 8) .
-
MediumCVSS 5.5 EPSS 0.66%
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free .
-
MediumCVSS 5.5 EPSS 0.63%
An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1 .
-
MediumCVSS 5.5 EPSS 0.63%
An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4 .
-
MediumCVSS 5.5 EPSS 0.75%
An issue has been found in function XRef::fetch in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow .
-
MediumCVSS 5.5 EPSS 0.75%
An issue has been found in function vfprintf in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a stack overflow.
-
HighCVSS 7.8 EPSS 0.56%
Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file.
-
HighCVSS 8.8 EPSS 1.6%
An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines (operator new [] versus operator delete).
-
HighCVSS 8.8 EPSS 1.6%
An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines (malloc versus operator delete).
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.