CVE-2020-23874

CVE-2020-23874 affects pdf2xml version 2.0, with a heap-buffer overflow in TextPage::addAttributsNode. Multiple sources (NVD, CNVD, OSV, RH) describe the same flaw; CVSS v3.1 vector: NETWORK, LOW attack complexity, NONE privileges, with high impact on confidentiality, integrity, and availability ...

CVE-2020-23873

CVE-2020-23873 concerns pdf2xml v2.0, which has a reported heap-buffer overflow in the function TextPage::dump() . The vulnerability affects pdf2xml version 2.0 and is described with a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required, and no user interacti...

CVE-2020-23872

CVE-2020-23872 affects pdf2xml v2.0. The vulnerability is a null pointer dereference in TextPage::restoreState, which can be exploited to cause a denial of service. Connected sources (CNVD/CNVD-derived, Red Hat, OSV, CNVD, CNVD-like feeds) corroborate the same description. There is no detail in t...

CVE-2020-23876

pdf2xml v2.0 contains a memory leak in the function TextPage::testLinkedText. The CVE details indicate this is a memory-management issue within pdftoxml’s PDF-to-XML conversion component, affecting this specific version. Reported in multiple feeds (including Red Hat and CNVD entries) under the sa...

CVE-2020-23877

CVE-2020-23877 affects pdf2xml/pdftoxml version 2.0, where a stack buffer overflow is exposed in the getObjectStream component. The CVE is documented across multiple sources (NVD entry and CNVD/CNNVD variants) and indicates a high-severity issue (CVSS v2: AV:N/AC:L/Au:N/C:P/I:P/A:P; CVSS v3.1: CR...