CVE-2020-25725: Use After Free
Published Nov 21, 2020
·Updated
In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState state) SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack->cache, which causes an heap-use-after-free problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font.
Affected Software
3 affected components
Xpdfreader Xpdf=4.02
Fedoraproject Fedora=32
Fedoraproject Fedora=33
Event History
Nov 21, 2020
CVE Published
via MITRE·05:29 AM
Data Sourced
via MITRE·05:29 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-25725?
CVE-2020-25725 is a vulnerability in Xpdf 4.02 that causes a heap-use-after-free problem.
2
What software is affected by CVE-2020-25725?
Xpdf 4.02 and Fedora 32 and 33 are affected by CVE-2020-25725.
3
What is the severity of CVE-2020-25725?
The severity of CVE-2020-25725 is medium with a score of 5.5.
4
How can I fix CVE-2020-25725?
Upgrade Xpdf to a version that has the fix, and apply the latest updates for Fedora.
5
Where can I find more information about CVE-2020-25725?
You can find more information about CVE-2020-25725 at the provided references.