Pdfresurrect Project Pdfresurrect — known CVE vulnerabilities

Every CVE whose affected-product data names Pdfresurrect Project Pdfresurrect, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-14267 — CVSS 7.8 (high): PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled.
• CVE-2019-14934 — CVSS 7.8 (high): An issue was discovered in PDFResurrect before 0.18. pdf_load_pages_kids in pdf.c doesn't validate a certain size value, which leads to a…
• CVE-2020-20740 — CVSS 7.8 (high): PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().
• CVE-2020-9549 — CVSS 7.8 (high): In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document.
• CVE-2021-3508 — CVSS 5.5 (medium): A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in get_xref_linear_skipped() in pdf.c via a crafted PDF file.