Pdf2json
Vendor:
First CVE: Aug 5, 2018 · Active for 7 years
20
Total CVEs
More Total CVEs than 94% of tracked products
6.7
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
6.3
Avg CVSS
Higher Avg CVSS than 25% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Pdf2json over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 5, 2018
7 years ago
Most Recent CVE
Oct 20, 2023
1,008 days ago
CVE Severity & Scoring
Pdf2json20 CVEs
75%
20%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local14 (70.0%)
Network6 (30.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low20 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (15.0%)
Unknown0 (0.0%)
Required17 (85.0%)
Privileges Required
Low3 (15.0%)
High0 (0.0%)
None17 (85.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (20 CVEs).
20 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-23878CRITICAL pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch. | Nov 10, 2021 | 9.8 | 30 | NO | NO |
CVE-2018-14947HIGH An issue has been found in PDF2JSON 0.69. XmlFontAccu::CSStyle in XmlFonts.cc has Mismatched Memory Management Routines (operator new [] versus operator delete). | Aug 5, 2018 | 8.8 | 27 | NO | NO |
CVE-2018-14946HIGH An issue has been found in PDF2JSON 0.69. The HtmlString class in ImgOutputDev.cc has Mismatched Memory Management Routines (malloc versus operator delete). | Aug 5, 2018 | 8.8 | 26 | NO | NO |
CVE-2020-23879HIGH pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject. | Nov 10, 2021 | 7.5 | 24 | NO | NO |
CVE-2020-19475MEDIUM An issue has been found in function CCITTFaxStream::lookChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid write of size 2 . | Jul 21, 2021 | 5.5 | 20 | NO | NO |
CVE-2020-19473MEDIUM An issue has been found in function DCTStream::decodeImage in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an uncaught floating point exception. | Jul 21, 2021 | 5.5 | 20 | NO | NO |
CVE-2020-19470MEDIUM An issue has been found in function DCTStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a NULL pointer dereference (invalid read of size 1 | Jul 21, 2021 | 5.5 | 20 | NO | NO |
CVE-2020-19468MEDIUM An issue has been found in function EmbedStream::getChar in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to a null pointer derefenrece (invalid read of size | Jul 21, 2021 | 5.5 | 20 | NO | NO |
CVE-2020-19467MEDIUM An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an Illegal Use After Free . | Jul 21, 2021 | 5.5 | 20 | NO | NO |
CVE-2020-19466MEDIUM An issue has been found in function DCTStream::transformDataUnit in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 1 . | Jul 21, 2021 | 5.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (20 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (20 CVEs).
Media Mentions
Signals from CVEs in this product scope (20 CVEs).
Top CNAs Publishing CVEs For Pdf2json
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 0.71 | 2 | 8.7 | 1.5% | 0 | 0 |
| 0.70 | 13 | 5.5 | 0.7% | 0 | 0 |
| 0.69 | 3 | 8.5 | 1.3% | 0 | 0 |