CVE-2020-9549

PDFResurrect vulnerability CVE-2020-9549 affects versions 0.12–0.19; get_type in pdf.c can trigger an out-of-bounds write when parsing crafted PDFs. Public advisories (Mageia MGASA-2020-0133, Ubuntu USN-4642-1, USN-5282-1, OSV MGASA/MGASA) describe potential denial of service or arbitrary code ex...

CVE-2019-14267

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file caused by mishandling of startxref and %%%EOF. NVD CVE-2019-14267 (and related CVEs) are documented with mitigations/patches in multiple advisories (e.g., Fedora fixes around 0.18, Ubuntu USN-5282-1). Exploitation status is not detail...

CVE-2020-20740

CVE-2020-20740 affects PDFResurrect. The issue is a heap-buffer-overflow in pdf_get_version() caused by lack of header validation in PDFs processed by PDFResurrect before version 0.20. Multiple distributions document the vulnerability and its fix, with patches released (e.g., PDFResurrect 0.20+; ...

CVE-2019-14934

CVE-2019-14934 affects PDFResurrect prior to 0.18. The issue is in pdf_load_pages_kids in pdf.c where an unchecked size value can cause a malloc failure and an out-of-bounds write. Public advisories (Debian, Mageia, Ubuntu, Fedora/OpenVAS) indicate patches/upstream fixes have been released; remed...

CVE-2021-3508

CVE-2021-3508 affects PDFResurrect 0.22b; a crafted PDF can trigger an infinite loop in get_xref_linear_skipped() in pdf.c. Documents do not specify exploitation status or a fix; no patch details are provided in the supplied sources. Monitor for updates and vendor advisories for remediation.