CVE-2019-5046CWE-122

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522

High · published October 9, 2019

CVSS v3.0
8.8
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02282 · 83.0th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2019-10-09T20:55Z
EPSS history
Timeline
  • 09 OCT 20:55Z
    A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522
    cvelistv5