CVE-2020-24996

There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2

published September 3, 2020

CVSS
—
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftohtml binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01054 · 64.1th percentile
Published
2020-09-03T22:17Z
EPSS history
Timeline
  • 03 SEP 22:17Z
    There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2
    cvelistv5