cve/2019/CVE-2019-17064.md

CVE-2019-17064

Description

Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor.

POC

Reference

• http://packetstormsecurity.com/files/154713/Xpdf-4.02-NULL-Pointer-Dereference.html
• https://forum.xpdfreader.com/viewtopic.php?f=3&t=41890

Github

No PoCs found on GitHub currently.