CVE-2024-28699

https://notcve.org/view.php?id=CVE-2024-28699

22 Apr 2024 — A buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbitrary code via the GString::copy() and ImgOutputDev::ImgOutputDev function. Una vulnerabilidad de desbordamiento de búfer en pdf2json v0.70 permite a un atacante local ejecutar código arbitrario a través de las funciones GString::copy() e ImgOutputDev::ImgOutputDev. • http://pdf2json.com • CWE-94: Improper Control of Generation of Code ('Code Injection') •