Pdfalto Project Pdfalto — known CVE vulnerabilities

Every CVE whose affected-product data names Pdfalto Project Pdfalto, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-32324 — CVSS 9.8 (critical): PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.
• CVE-2018-17338 — CVSS 7.8 (high): An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc.
• CVE-2018-18274 — CVSS 7.8 (high): A issue was found in pdfalto 0.2. There is a heap-based buffer overflow in the TextPage::addAttributsNode function in XmlAltoOutputDev.cc.
• CVE-2019-9878 — CVSS 7.8 (high): There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in…