CVE-2019-5618

A-PDF WAV to MP3 Stack-based Buffer Overflow

EPSS 2.2%CWE-121

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 2.2%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

17 Aug 2010Metasploit module available

29 Apr 2020Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow.

Affected products

Want to know if your infrastructure is exposed to this?

References