Vulnerability Description
pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has not yet been addressed and users are advised to avoid untrusted input to their systems.
Related Weaknesses (CWE)
References
- https://github.com/leonhad/pdftools/security/advisories/GHSA-hgvf-4pf3-fwc9
- https://github.com/leonhad/pdftools/security/advisories/GHSA-hgvf-4pf3-fwc9
FAQ
What is CVE-2024-56139?
CVE-2024-56139 is a documented vulnerability. pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has ...
How severe is CVE-2024-56139?
CVSS scoring is not yet available for CVE-2024-56139. Check NVD for updates.
Is there a patch for CVE-2024-56139?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.