58 matches found
CVE-2024-56520
An issue was discovered in tc-lib-pdf-font before 2.6.4, as used in TCPDF before 6.8.0 and other products. Fonts are mishandled, e.g., FontBBox for Type 1 and TrueType fonts is misparsed...
CVE-2024-47579: Insertion of Sensitive Information into Externally-Accessible File or Directory
An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows th...
ghostscript:gs_device_ps2write_fuzzer: Crash in chunk_free_object
Detailed Report: https://oss-fuzz.com/testcase?key=5174599181991936 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...
CVE-2024-0794: Out-of-bounds Read
Certain HP LaserJet Pro, HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to Remote Code Execution due to buffer overflow when rendering fonts embedded in a PDF file...
PT-2024-15826 · Hewlett Packard · Hp Laserjet Managed +2
Name of the Vulnerable Software and Affected Versions: HP LaserJet Pro, HP Enterprise LaserJet, and HP LaserJet Managed Printers affected versions not specified Description: The issue is related to a buffer overflow when rendering fonts embedded in a PDF file, potentially allowing Remote Code...
Memory Leak
mupdf is vulnerable to Memory Leak. The vulnerability exists in the pdf-font-add.c, which allows an attacker to gain sensitive information...
DEBIAN-CVE-2020-26683
A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...
CVE-2020-26683
A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...
UBUNTU-CVE-2020-26683
A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...
Missing Release of Memory after Effective Lifetime
Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime through the /pdf/pdf-font-add.c component. An attacker can obtain sensitive information by exploiting a memory leak issue. Remediation Upgrade mupdf to version 1.18.0 or higher...
CVE-2020-26683
CVE-2020-26683 : A memory leak vulnerability in MuPDF 1.17.0, specifically in /pdf/pdf-font-add.c, could allow an attacker to obtain sensitive information. The issue is documented across multiple advisories (MuPDF/Ubuntu OSS/OSV entries). Public details in the provided sources do not include a co...
Artifex Software MuPDF 安全漏洞
Artifex Software MuPDF is a free and lightweight PDF reader from Artifex Software, USA. A security vulnerability exists in Artifex Software MuPDF version 1.17.0, which originates from a memory leak in /pdf/pdf-font-add.c. The vulnerability is caused by the presence of a memory leak in the...
PT-2023-11754
Name of the Vulnerable Software and Affected Versions Artifex Software MuPDF version 1.17.0 Description A memory leak issue in the /pdf/pdf-font-add.c file allows attackers to obtain sensitive information. Recommendations For Artifex Software MuPDF version 1.17.0, at the moment, there is no...
CVE-2020-26683: Missing Release of Memory after Effective Lifetime
A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...
CVE-2020-26683
A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...
CVE-2020-26683
A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...
SUSE CVE-2010-3814
Heap-based buffer overflow in the InsSHZ function in ttinterp.c in FreeType 2.4.3 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted SHZ bytecode instruction, related to TrueType opcodes, as demonstrated by a PDF document wit...
ghostscript:gs_device_ps2write_fuzzer: Crash in pdfi_free_object
Detailed Report: https://oss-fuzz.com/testcase?key=5347646310580224 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6310000a0858 Crash State: pdfifreeobject...
poppler:qt_pdf_fuzzer: Use-of-uninitialized-value in FoFiTrueType::convertToType0
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4798482252693504 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...
