CVE-2024-56139

Description

pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has not yet been addressed and users are advised to avoid untrusted input to their systems.

Reserved 2024-12-16 | Published 2024-12-17 | Updated 2024-12-20 | Assigner GitHub_M

Problem types

CWE-121: Stack-based Buffer Overflow

Product status

<= 0.5.0
affected

References

github.com/...ftools/security/advisories/GHSA-hgvf-4pf3-fwc9

cve.org (CVE-2024-56139)

nvd.nist.gov (CVE-2024-56139)

Download JSON