CVE-2024-56139

pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has not yet been addressed and users are advised to avoid untrusted input to their systems.

• CWE-121

• https://github.com/leonhad/pdftools/security/advisories/GHSA-hgvf-4pf3-fwc9
• https://github.com/leonhad/pdftools/security/advisories/GHSA-hgvf-4pf3-fwc9

Published

Dec 17, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-56133Improper Input Validation vulnerability of Authenticated Use…6.8
• CVE-2024-56134Improper Input Validation vulnerability of Authenticated Use…6.8
• CVE-2024-56135Improper Input Validation vulnerability of Authenticated Use…6.8
• CVE-2024-56136Zulip server provides an open-source team chat that helps te…5.3
• CVE-2024-56137MaxKB, which stands for Max Knowledge Base, is an open sourc…7.2
• CVE-2024-56138notion-go is a collection of libraries for supporting sign a…4
• CVE-2024-5614The Piotnet Addons For Elementor plugin for WordPress is vul…5.3
• CVE-2024-56140Astro is a web framework for content-driven websites. In aff…6.5
• CVE-2024-56141Minosoft is an open-source, multi-version Minecraft Java Edi…5
• CVE-2024-56142pghoard is a PostgreSQL backup daemon and restore tooling th…6.5
• CVE-2024-56143Strapi is an open-source headless content management system.…8.2
• CVE-2024-56144librenms is a community-based GPL-licensed network monitorin…5.4