CVE-2019-5050

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file.

• CWE-122
• CWE-787

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0819Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0819Exploit, Third Party Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5044Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-5045A specifically crafted jpeg2000 file embedded in a PDF file …7.8
• CVE-2019-5046A specifically crafted jpeg2000 file embedded in a PDF file …7.8
• CVE-2019-5047An exploitable Use After Free vulnerability exists in the Ch…7.8
• CVE-2019-5048A specifically crafted PDF file can lead to a heap corruptio…7.8
• CVE-2019-5049An exploitable memory corruption vulnerability exists in AMD…10
• CVE-2019-5051An exploitable heap-based buffer overflow vulnerability exis…8.8
• CVE-2019-5052An exploitable integer overflow vulnerability exists when lo…8.8
• CVE-2019-5053An exploitable use-after-free vulnerability exists in the Le…7.8
• CVE-2019-5054An exploitable denial-of-service vulnerability exists in the…7.5
• CVE-2019-5055An exploitable denial-of-service vulnerability exists in the…7.5
• CVE-2019-5057An exploitable code execution vulnerability exists in the PC…8.8