CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.1. It may lead to a denial-of-service condition.
CVE
CVE-2019-12360
Severity
HIGH
CVSS
7.1
EPSS
1.12%
Original NVD Description
A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data into dump content.
Related CVEs
Other vulnerabilities affecting the same vendor(s)