cve/2019/CVE-2019-5042.md

### [CVE-2019-5042](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5042)
![](https://img.shields.io/static/v1?label=Product&message=Aspose.PDF%20for%20C%2B%2B&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-416%3A%20Use%20After%20Free&color=brighgreen)

### Description

An exploitable Use-After-Free vulnerability exists in the way FunctionType 0 PDF elements are processed in Aspose.PDF 19.2 for C++. A specially crafted PDF can cause a dangling heap pointer, resulting in a use-after-free. An attacker can send a malicious PDF to trigger this vulnerability.

### POC

#### Reference
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0809

#### Github
- https://github.com/0xCyberY/CVE-T4PDF
- https://github.com/ARPSyndicate/cvemon