CVE-2024-28699 - A buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbitrary code via the GString::copy() and ImgOutputDev::ImgOutputDev function

Back Back to CVE browser

HIGH

A buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbitrary code via the GString::copy() and ImgOutputDev::ImgOutputDev function

Published Apr 22, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.37%

Description

A buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbitrary code via the GString::copy() and ImgOutputDev::ImgOutputDev function.

Affected products

Vendor Json Product Pdf2json Default
n/a
- Version
  0.70
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Json

Pdf2json

n/a

Version	Status	Constraints
0.70	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25793		Advisory
https://github.com/flexpaper/pdf2json
https://github.com/flexpaper/pdf2json/issues/52