CVE-2019-9589

Name: CVE-2019-9589
Creator: NVD / NIST
Published: 2019-03-06T08:29:00.433+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.20%

Last modified Jun 17, 2026

CVE-2019-9589 is a vulnerability of currently unknown severity. There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. EPSS estimates a 1.20% chance of exploitation in the next 30 days.

Description

There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Metrics

EPSS Probability

1.20%

64.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-476

Affected Software

Vendor	Product	Versions
Glyphandcog	Xpdfreader	4.01

References

https://forum.xpdfreader.com/viewtopic.php?f=3&t=41262Exploit, Third Party Advisory
https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-psoutputdevsetupresources-xpdf-4-01/Exploit, Third Party Advisory
https://forum.xpdfreader.com/viewtopic.php?f=3&t=41262Exploit, Third Party Advisory
https://research.loginsoft.com/bugs/null-pointer-dereference-vulnerability-in-function-psoutputdevsetupresources-xpdf-4-01/Exploit, Third Party Advisory

Timeline

Published: Mar 6, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-9589?

How severe is CVE-2019-9589?

Severity scoring for CVE-2019-9589 is pending analysis. The EPSS model estimates a 1.20% probability of exploitation in the next 30 days.

How do I fix CVE-2019-9589?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-9589?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST