PT-2021-22825 · Pdftron · Pdftron

Published 2021-12-23 · Updated 2022-05-01 · CVE-2021-40160

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PDFTron versions prior to 9.0.7

Description The issue allows PDFTron to read beyond allocated boundaries when parsing a maliciously crafted PDF file, potentially leading to the execution of arbitrary code.

Recommendations For versions prior to 9.0.7, update to version 9.0.7 or later to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2021-40160

ZDI-22-474

Affected Products

Pdftron

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-40160 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-474 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40160 · Vendor Advisory
• https://autodesk.com/trust/security-advisories/adsk-sa-2021-0010 · Vendor Advisory