CVE-2020-10222

HIGH 8.1CVE-2020-10222 · Published 08/03/2020 · updated 17/06/2026

In short

CVE-2020-10222 is a HIGH (CVSS 8.1) vulnerability affecting nitro pro (gonitro).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.6% of all vulnerabilities.
Fix: update to 13.13.2.242 or later.

Package	Affected versions	Patched versions
nitro pro gonitro	`< 13.13.2.242`	`13.13.2.242`

npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 13.13.2.242

13.13.2.242

More vulnerabilities in nitro pro

See all →