{"id":"CVE-2020-18750","details":"Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file.","modified":"2026-07-08T16:27:26.772816Z","published":"2021-02-05T19:15:11.917Z","references":[{"type":"REPORT","url":"https://github.com/flexpaper/pdf2json/issues/22"},{"type":"FIX","url":"https://github.com/flexpaper/pdf2json/commit/80bf71f16c804108fd933e267fe31692aaa509b4"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/flexpaper/pdf2json","events":[{"introduced":"490bdce4b4a5fcbe1e5d3b660b1470b857120ed6"},{"last_affected":"490bdce4b4a5fcbe1e5d3b660b1470b857120ed6"},{"fixed":"80bf71f16c804108fd933e267fe31692aaa509b4"}],"database_specific":{"cpe":"cpe:2.3:a:flowpaper:pdf2json:0.69:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0.69"},{"last_affected":"0.69"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["0.69","v0.69"],"database_specific":{"vanir_signatures_modified":"2026-07-08T16:27:26Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["296581558843798303851306365071713045494","156842375972854208427334935431732583780","92492752521683051498147300896232455325","339302248929905311033055208289492706429","289441482887525075529687104148174470621","334157227976643163740249442238578316749","334802747292707895086807105000534193524","65491936683828984062756025459246885514","93862818123020513481704682489478049633","206710189554211156661039158911602161078"],"threshold":0.9},"id":"CVE-2020-18750-3d4e13a5","signature_type":"Line","signature_version":"v1","source":"https://github.com/flexpaper/pdf2json/commit/80bf71f16c804108fd933e267fe31692aaa509b4","target":{"file":"xpdf/CharCodeToUnicode.cc"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/flexpaper/pdf2json/commit/80bf71f16c804108fd933e267fe31692aaa509b4","target":{"file":"xpdf/CharCodeToUnicode.cc","function":"CharCodeToUnicode::addMapping"},"deprecated":false,"digest":{"length":1110,"function_hash":"339837459725287454534915836275858688563"},"id":"CVE-2020-18750-a29248fc"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-18750.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}