CVE-2019-16927

MEDIUM EPSS 53.8%

Published Sep 27, 20196y ago · Modified Jun 17, 20262w ago

5.5 CVSS 3.1

Medium

Published Sep 27, 2019 6y ago

Last Modified Jun 17, 2026 2w ago

Description

Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than CVE-2019-9877.

CVSS Details

Base Score

5.5

Exploitability

1.8

Impact

3.6

Vector string

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Unchanged

Confidentiality None

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

53.8% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-787 Out-of-bounds Write Memory Safety

Affected Products 1

Vendor	Product	Version	Range
glyphandcog	xpdf	4.01.01	any

References 1

forum.xpdfreader.com https://forum.xpdfreader.com/viewtopic.php?f=3&t=41885

ExploitVendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.