CVE-2020-20740

CVE-2020-20740 affects PDFResurrect. The issue is a heap-buffer-overflow in pdf_get_version() caused by lack of header validation in PDFs processed by PDFResurrect before version 0.20. Multiple distributions document the vulnerability and its fix, with patches released (e.g., PDFResurrect 0.20+; ...

CVE-2019-14934

CVE-2019-14934 affects PDFResurrect prior to 0.18. The issue is in pdf_load_pages_kids in pdf.c where an unchecked size value can cause a malloc failure and an out-of-bounds write. Public advisories (Debian, Mageia, Ubuntu, Fedora/OpenVAS) indicate patches/upstream fixes have been released; remed...