Hyland Perceptive Document Filters OpenDocument to JPEG conversion SkCanvas Code Execution vulnerability(CVE-2018-3845)

Summary An exploitable double free exists in the OpenDocument to JPEG conversion functionality of the Hyland Perspective Document Filters version 11.4.0.2647. A crafted OpenDocument document can lead to a SkCanvas object double free resulting in direct code execution. Tested Versions Perceptive...

CVE-2018-3845

CVE-2018-3845 affects Hyland Perceptive Document Filters 11.4.0.2647 (x86/x64 Windows/Linux) and related builds, in the OpenDocument to JPEG conversion path. The root cause is a double release/double free of a SkCanvas object during the conversion process, caused by a faulty lifecycle/destruction...