CVE catalog

CVE-2019-14267

pdfresurrect: CVE-2019-14267

PDFResurrect 0.15 has a buffer overflow via a crafted PDF file because data associated with startxref and %%EOF is mishandled.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	pdfresurrect	sid	`0.23-2`	fixed
Debian	pdfresurrect	forky	`0.23-2`	fixed
Debian	pdfresurrect	trixie	`0.23-2`	fixed
Debian	pdfresurrect	bookworm	`0.23-2`	fixed
Ubuntu	pdfresurrect	pro	`0.22-1`	vulnerable
Ubuntu	pdfresurrect	pro	`0.22-2`	vulnerable
Ubuntu	pdfresurrect	pro	`0.22-2ubuntu0.1~esm1`	fixed
Ubuntu	pdfresurrect	pro	`0.12-6`	vulnerable
Ubuntu	pdfresurrect	pro	`0.14-1`	vulnerable
Ubuntu	pdfresurrect	pro	`0.14-1ubuntu0.1~esm1`	fixed

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	pdfresurrect	source	sid	`0.16-1`	unimportant	Not reported	Not reported
Debian	pdfresurrect	source	forky	`0.16-1`	unimportant	Not reported	Not reported
Debian	pdfresurrect	source	trixie	`0.16-1`	unimportant	Not reported	Not reported
Debian	pdfresurrect	source	bookworm	`0.16-1`	unimportant	Not reported	Not reported
Ubuntu	pdfresurrect	deb	pro	`0.22-2ubuntu0.1~esm1`	Not reported	USN-5282-1	Not reported
Ubuntu	pdfresurrect	deb	pro	`0.14-1ubuntu0.1~esm1`	Not reported	UBUNTU-CVE-2019-14267	Not reported

Observed: Oct 23, 2026, 5:40:04 PM UTC