CVE-2019-19818

MEDIUM 5.5CVE-2019-19818 · Published 16/12/2019 · updated 17/06/2026

In short

CVE-2019-19818 is a MEDIUM (CVSS 5.5) vulnerability affecting nitro free pdf reader (gonitro).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
nitro free pdf reader gonitro	`= 12.0.0.112`	No fix yet

Description

The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0xa08a Out-of-Bounds Read via crafted Unicode content.

References

nafiez/nafiez.github.io · Exploit
nafiez.github.io/security/vulnerability/remote/2019/12/12/multiple-nitro-pdf-vulnerability.html · Exploit

CVE-2019-19818

In short

Description

References

More vulnerabilities in nitro free pdf reader

CVE-2019-19818

In short

Description

References

More vulnerabilities in nitro free pdf reader