CVE-2019-13281: fedoraproject fedora Out-of-bounds Write

Vulnerability summary

CVE-2019-13281 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in fedoraproject fedora. EPSS estimates a 1.21% chance of exploitation in the next 30 days, higher than 68% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 04-07-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of Service, an information leak, or possibly unspecified other impact.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.