CVE-2019-12958

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second…

published June 24, 2019

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01155 · 66.7th percentile
Published
2019-06-24T23:27Z
EPSS history
Timeline
  • 24 JUN 23:27Z
    In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second…
    cvelistv5