Vulnerabilities

TI-2020-14701 CVE-2020-23877 · GHSA-j82r-h9wj-xwjh

pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.

MEDIUM 46

pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01762 Published 2021-11-10 No fix listed CWE-787

TI-2020-14700 CVE-2020-23876 · GHSA-5cqv-55pw-mrcp

LOW 36

pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01406 Published 2021-11-10 No fix listed CWE-401

TI-2020-14699 CVE-2020-23874 · GHSA-pfrf-467v-cphj

MEDIUM 46

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02131 Published 2021-11-10 No fix listed CWE-787

TI-2020-14698 CVE-2020-23873 · GHSA-62fg-499r-jwch

MEDIUM 46

pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02131 Published 2021-11-10 No fix listed CWE-787

TI-2020-14697 CVE-2020-23872 · GHSA-52x5-63xf-5w3p

LOW 36

A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01406 Published 2021-11-10 No fix listed CWE-476