CVE-2019-16115 - In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor

Back Back to CVE browser

HIGH

In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor

Published Sep 8, 2019

7.8

HIGH

CVSS 3.1

EPSS 1.06%

Description

In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (1)

https://forum.xpdfreader.com/viewtopic.php?f=3&t=41872
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://forum.xpdfreader.com/viewtopic.php?f=3&t=41872		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 8, 2019

Updated Aug 5, 2024

Reserved Sep 8, 2019

Link CVE-2019-16115

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-16115

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-16115