CVE-2019-12515 — Out-of-bounds Read in Xpdfreader
Severity
7.1HIGHNVD
EPSS
0.3%
top 47.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 2
Latest updateMay 24
Description
There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages2 packages
🔴Vulnerability Details
3GHSA▶
GHSA-8rcg-cr22-ww3f: There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream↗2022-05-24
OSV▶
CVE-2019-12515: There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream↗2019-06-02
CVEList▶
CVE-2019-12515: There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream↗2019-06-01
📋Vendor Advisories
1Debian▶
CVE-2019-12515: xpdf - There is an out-of-bounds read vulnerability in the function FlateStream::getCha...↗2019