CVE-2020-24996
PoC —CVSS 3.1
7.8 high
EPSS
1%p62
Published
()
Modified
Description
There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
- Vendors
- xpdfreader
- Products
- xpdf
- Weakness
- CWE-665
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.