CVE-2019-13291
NONE EPSS 61.5%
Published Jul 4, 20197y ago · Modified Jun 17, 20262w ago
Published Jul 4, 2019 7y ago
Last Modified Jun 17, 2026 2w ago
Description
In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure.
Threat Intelligence
EPSS Exploit Probability
61.5% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-125 Out-of-bounds Read Memory Safety
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| glyphandcog | xpdfreader | 4.01.01 | any |
References 1
- forum.xpdfreader.com https://forum.xpdfreader.com/viewtopic.php?f=3&t=41818
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.