CVE-2019-5045 - A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522

Back Back to CVE browser

HIGH

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522

Published Oct 9, 2019

7.8

HIGH

CVSS 3.1

EPSS 2.28%

Description

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.

Affected products

Vendor n/a Product NitroPDF Default
n/a
- Version
  NitroPDF 12.12.1.522
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

NitroPDF

n/a

Version	Status	Constraints
NitroPDF 12.12.1.522	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-122

CWE-787

Out-of-bounds Write

References (1)

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0814
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0814		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner talos

Published Oct 9, 2019

Updated Aug 4, 2024

Reserved Jan 4, 2019

Link CVE-2019-5045

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5045

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-5045