CVE-2019-12958

MEDIUM · CVSS 5.5 EPSS 1.16%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-06-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-12958

Severity

MEDIUM

CVSS

5.5

EPSS

1.16%

Original NVD Description

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one element allocated.