CVE-2019-14934: High severity pdfresurrect vulnerability
Published Aug 11, 2019
·Updated
An issue was discovered in PDFResurrect before 0.18. pdfloadpageskids in pdf.c doesn't validate a certain size value, which leads to a malloc failure and out-of-bounds write.
Affected Software
5 affected components
Pdfresurrect Project Pdfresurrect<0.18
Fedoraproject Fedora=29
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Debian Debian Linux=9.0
Remediation
Event History
Aug 11, 2019
CVE Published
via MITRE·09:28 PM
Data Sourced
via MITRE·09:28 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-14934?
CVE-2019-14934 is considered a high severity vulnerability due to potential out-of-bounds write and malloc failure.
2
How do I fix CVE-2019-14934?
To fix CVE-2019-14934, upgrade to PDFResurrect version 0.18 or later.
3
What software is affected by CVE-2019-14934?
CVE-2019-14934 affects PDFResurrect versions prior to 0.18 and certain versions of Fedora and Debian Linux.
4
What type of vulnerability is CVE-2019-14934?
CVE-2019-14934 is a memory management vulnerability that can cause a malloc failure and result in out-of-bounds writes.
5
Can CVE-2019-14934 lead to security exploitation?
Yes, exploiting CVE-2019-14934 could potentially allow unauthorized access or unintended behavior in the affected software.