CVE-2020-10222

Nitro Pro’s npdf.dll (versions before 13.13.2.242) is affected by a heap memory corruption vulnerability triggered by a crafted PDF, at npdf!nitro::get_property+2381. Public sources describe the issue as a heap corruption flaw in Nitro Pro’s PDF handling; CVE-2020-10222 carries a high impact with...

CVE-2020-10223

Summary: CVE-2020-10223 affects Nitro Pro’s npdf.dll. The vulnerability is a JBIG2Decode CNxJBIG2DecodeStream heap corruption triggered by a crafted PDF document, impacting versions prior to Nitro Pro 13.13.2.242. The precise vulnerable component is NPDF code path npdf!CAPPDAnnotHandlerUtils::cre...

CVE-2019-18958

Nitro Pro before 13.2 is affected. The issue arises when a PDF is produced by OCR on the JPEG output of a scanner, causing Nitro Pro to write a debug.log in the same directory as the PDF. Reportedly, if this debug.log is later edited and then executed, it can pose a security risk. Connected docum...