CVE-2020-23872 – A NULL pointer dereference in the function TextPage::restoreState of pdf2

A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a denial of service (DoS).

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-23872

Reference (s):

• https://github.com/Aurorainfinity/Poc/tree/master/pdf2xml
• https://github.com/kermitt2/pdf2xml/issues/10