Aspose

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Aspose records in CISA KEV

No Aspose vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Aspose.pdf For C++ · all components

TI-2019-03528 CVE-2019-5067 · GHSA-4pg2-m5v4-8fpj

MEDIUM 48

An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03443 Published 2019-09-18 No fix listed CWE-416

TI-2019-03527 CVE-2019-5066 · GHSA-jqg4-p627-84cf

MEDIUM 47

An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02395 Published 2019-09-18 No fix listed CWE-416

TI-2019-03505 CVE-2019-5042 · GHSA-cf89-rm5v-j67r

MEDIUM 42

An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02078 Published 2019-09-18 No fix listed CWE-416