Vulnerabilities > Glyphandcog > High

DATE CVE VULNERABILITY TITLE RISK
2019-06-02 CVE-2019-12515 Out-of-bounds Read vulnerability in Glyphandcog Xpdfreader 4.01.01
There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01.
local
low complexity
glyphandcog CWE-125
7.1
2019-05-31 CVE-2019-12493 Out-of-bounds Read vulnerability in Glyphandcog Xpdfreader 4.01.01
A stack-based buffer over-read exists in PostScriptFunction::transform in Function.cc in Xpdf 4.01.01 because GfxSeparationColorSpace and GfxDeviceNColorSpace mishandle tint transform functions.
local
low complexity
glyphandcog CWE-125
7.1
2019-05-27 CVE-2019-12360 Out-of-bounds Read vulnerability in Glyphandcog Xpdfreader 4.01.01
A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01.
local
low complexity
glyphandcog CWE-125
7.1
2019-03-06 CVE-2019-9589 NULL Pointer Dereference vulnerability in Glyphandcog Xpdfreader 4.01
There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01.
local
low complexity
glyphandcog CWE-476
7.8
2019-03-06 CVE-2019-9588 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Glyphandcog Xpdfreader 4.01
There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01.
local
low complexity
glyphandcog CWE-119
7.8
2019-03-06 CVE-2019-9587 Resource Exhaustion vulnerability in Glyphandcog Xpdfreader 4.01
There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01.
local
low complexity
glyphandcog CWE-400
7.8