CVE-2019-5053CWE-416

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF

High · published October 9, 2019

CVSS v3.0
7.5
EPSS
1%
Percentile
70.9
In the wild
Unconfirmed
What it is

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01331 · 70.9th percentile
Weakness
CWE-416 · Use After Free
Published
2019-10-09T20:40Z
EPSS history
Timeline
  • 09 OCT 20:40Z
    An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF
    cvelistv5