CVE-2019-5045

A specifically crafted jpeg2000 file embedded in a PDF file can lead to a heap corruption when opening a PDF document in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.

• CWE-122
• CWE-787

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0814Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0814Exploit, Third Party Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5039An exploitable command execution vulnerability exists in the…8.8
• CVE-2019-5040An exploitable information disclosure vulnerability exists i…7.5
• CVE-2019-5041An exploitable Stack Based Buffer Overflow vulnerability exi…8.8
• CVE-2019-5042An exploitable Use-After-Free vulnerability exists in the wa…8.8
• CVE-2019-5043An exploitable denial-of-service vulnerability exists in the…7.5
• CVE-2019-5044Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-5046A specifically crafted jpeg2000 file embedded in a PDF file …7.8
• CVE-2019-5047An exploitable Use After Free vulnerability exists in the Ch…7.8
• CVE-2019-5048A specifically crafted PDF file can lead to a heap corruptio…7.8
• CVE-2019-5049An exploitable memory corruption vulnerability exists in AMD…10
• CVE-2019-5050A specifically crafted PDF file can lead to a heap corruptio…7.8
• CVE-2019-5051An exploitable heap-based buffer overflow vulnerability exis…8.8