CVE-2019-25550

Katalog CVE

CVSS 5.5 · Medium EPSS 0,18%

Kerentanan Out-of-bounds Write pada verypdf encrypt pdf. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into password fields. Attackers can paste a 1000-byte buffer into the User Password or Master Password field in the Settings dialog to trigger an application crash when importing PDF files.

Rincian

Terbit di NVD

21 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 6,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/encrypt-pdf-denial-of-service-via-buffer-overflow advisory pihak ketiga
• https://www.exploit-db.com/exploits/46871 exploit · vdb entry
• http://www.verypdf.com product