Vulnerabilities > CVE-2020-25725 - Use After Free vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
xpdfreader
fedoraproject
CWE-416
NVD
Published: 2020-11-21
Updated: 2023-12-13

Summary

In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font.

Vulnerable Configurations

Part Description Count
Application
Xpdfreader
1
OS
Fedoraproject
2

Common Weakness Enumeration (CWE)

References