6 matches found
CJBig2Image::expand() Code Execution
The vulnerability of the CJBig2Image::expand function in Kindle e-book readers is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...
CVE-2021-30354
Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...
CVE-2021-30354
Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...
CVE-2021-30354
Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...
CVE-2021-30354: Integer Overflow to Buffer Overflow
Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand and results in a memory corruption that leads to code execution when parsing a crafted PDF book...
PT-2021-7543
Name of the Vulnerable Software and Affected Versions Amazon Kindle e-reader versions prior to and including 5.13.4 Description The issue is caused by an Integer Overflow in the CJBig2Image::expand function, leading to a Heap-Based Buffer Overflow. This results in memory corruption and allows for...