CVE-2019-5053

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability...

CVE-2019-5053

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability...

CVE-2019-5053

CVE-2019-5053 maps to a NitroPDF use-after-free in the Length parsing function, causing type confusion when parsing the Length field in PDFs. Talos advisories (TALOS-2019-0830) describe an exploitable use-after-free in NitroPDF 12.12.1.522 with the /Length value (or a reference to it) leading to ...