Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Aspose

First CVE: Aug 21, 2019Active for: 7 yearsTotal CVEs: 6

Aspose offers a narrow line of document-processing and office-format conversion libraries for .NET and C/C++ environments, used to programmatically generate and manipulate PDFs, spreadsheets, and word documents. Vulnerabilities affecting the vendor skew strongly toward critical severity and recur through memory-safety weakness classes including use-after-free, out-of-bounds read and write conditions, stack-based buffer overflows, and use of uninitialized resources, reflecting the parsing and format-handling complexity inherent to these libraries. Defenders should treat Aspose library updates as a remediation priority in environments where untrusted documents are processed; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
2.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 80% of tracked vendors
9.1
Avg CVSS Score
Higher Avg CVSS Score than 88% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Aspose over time

Volume of CVEsAvg CVSS Base Score
First CVE
Aug 21, 2019
6 years ago
Most Recent CVE
Sep 18, 2019
2,501 days ago

Products(3 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2019-5067CRITICAL
An uninitialized memory access vulnerability exists in the way Aspose.PDF 19.2 for C++ handles invalid parent object pointers. A specially crafted PDF can cause a read and write fr
Sep 18, 20199.832NONO
CVE-2019-5066CRITICAL
An exploitable use-after-free vulnerability exists in the way LZW-compressed streams are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap poi
Sep 18, 20199.832NONO
CVE-2019-5041HIGH
An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0.0. A specially crafted doc file can cau
Aug 21, 20198.829NONO
CVE-2019-5042HIGH
An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling hea
Sep 18, 20198.828NONO
CVE-2019-5033HIGH
An exploitable out-of-bounds read vulnerability exists in the Number record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS file can cause an out-of-bounds re
Aug 21, 20198.827NONO
CVE-2019-5032HIGH
An exploitable out-of-bounds read vulnerability exists in the LabelSst record parser of Aspose Aspose.Cells 19.1.0 library. A specially crafted XLS file can cause an out-of-bounds
Aug 21, 20198.827NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
67%
33%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network6 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (50.0%)
Unknown0 (0.0%)
Required3 (50.0%)
Privileges Required
Low1 (16.7%)
High0 (0.0%)
None5 (83.3%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Aspose.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Aspose — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Aspose's Products

View all 1 CNAs →

Top CWEs