CVE-2019-5067 is an uninitialized memory access vulnerability in Aspose.PDF 19.2 for C++ that allows a specially crafted PDF to cause memory corruption and potentially arbitrary code execution. This critical vulnerability (CVSS 9.8) can be exploited remotely over the network with low attack complexity, requiring no user interaction or privileges. While the vulnerability has a high FAUCET Risk Score of 80/100 and has received some media coverage, there is no evidence of active exploitation, nor are there public exploit modules like Metasploit or Nuclei available. Community discussion and exploit intelligence suggest limited public attention or exploit development for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
19.2CPE matchmatch criteria | cpe:2.3:a:aspose:aspose.pdf_for_c\+\+:19.2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.